Skip to main content

Security fixes in tekton-pipelines-fips 1.14.0-r3

0
Medium
Published: 08/13/2026 (08/13/2026, 12:10:09 UTC)
Source: GCVE Database
Product: tekton-pipelines-fips

Description

The tekton-pipelines-fips package version 1.14.0-r3 addresses one security vulnerability identified as GHSA-HRXH-6V49-42GF. This release includes a patch that fixes the vulnerability. No CVSS score is provided, and there are no known exploits in the wild. The package is part of the Alpine ecosystem.

Affected software

Alpineghsa
tekton-pipelines-fips
Affected versions
<1.14.0-r3=1.14.0-r3

Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 08/14/2026, 17:04:42 UTC

Technical Analysis

Tekton-pipelines-fips version 1.14.0-r3 contains a security fix for a vulnerability tracked as GHSA-HRXH-6V49-42GF. The patch is included in this specific version, mitigating the identified issue. No detailed technical information or CVSS scoring is available for this vulnerability. The fix is confirmed available in version 1.14.0-r3.

Potential Impact

The vulnerability affects versions prior to 1.14.0-r3 of tekton-pipelines-fips. Without the patch, systems using earlier versions may be exposed to the security issue identified by GHSA-HRXH-6V49-42GF. There are no known active exploits targeting this vulnerability at this time.

Mitigation Recommendations

Upgrade to tekton-pipelines-fips version 1.14.0-r3 to apply the official security fix for the vulnerability GHSA-HRXH-6V49-42GF. No additional mitigation steps are indicated.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Osv Id
CLEANSTART-2026-VH25364
Osv Schema Version
1.7.3
Ecosystems
["Alpine"]

Threat ID: 6a7f4414bf8831d5395fd9ce

Added to database: 08/14/2026, 16:36:36 UTC

Last enriched: 08/14/2026, 17:04:42 UTC

Last updated: 09/23/2026, 04:35:34 UTC

Views: 23

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses