Known vulnerabilities in Red Hat OpenShift Pipelines 1.21
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-40938 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines | 7.5 High | Apr 21, 2026 |
| CVE-2026-33816 | Memory-safety vulnerability in github.com/jackc/pgx/v5 | 9.8 Critical | Apr 7, 2026 |
| CVE-2026-34986 | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including… | 7.5 High | Apr 6, 2026 |
| CVE-2026-33211 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines | 9.6 Critical | Mar 23, 2026 |
| CVE-2026-33186 | gRPC-Go is the Go language implementation of gRPC | 9.1 Critical | Mar 20, 2026 |
| CVE-2026-25639 | Axios is a promise based HTTP client for the browser and Node.js | 7.5 High | Feb 9, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433