Vulnerabilities of Red Hat OpenShift Pipelines

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-45736	ws is an open source WebSocket client and server for Node.js	4.4 Medium	May 15, 2026
CVE-2026-44293	protobufjs compiles protobuf definitions into JavaScript (JS) functions	7.7 High	May 13, 2026
CVE-2026-44289	protobufjs compiles protobuf definitions into JavaScript (JS) functions	7.5 High	May 13, 2026
CVE-2026-42338	ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript	5.3 Medium	May 12, 2026
CVE-2026-42264	Axios is a promise based HTTP client for the browser and Node.js	7.4 High	May 8, 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 High	May 7, 2026
CVE-2026-39820	Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…	7.5 High	May 7, 2026
CVE-2026-42499	Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322	7.5 High	May 7, 2026
CVE-2026-33814	When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it…	7.5 High	May 7, 2026
CVE-2026-6322	fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them…	7.5 High	May 5, 2026
CVE-2026-6321	fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize()…	7.5 High	May 4, 2026
CVE-2026-42039	Axios is a promise based HTTP client for the browser and Node.js	6.9 Medium	Apr 24, 2026
CVE-2026-42041	Axios is a promise based HTTP client for the browser and Node.js	4.8 Medium	Apr 24, 2026
CVE-2026-42043	Axios is a promise based HTTP client for the browser and Node.js	7.2 High	Apr 24, 2026
CVE-2026-42044	Axios is a promise based HTTP client for the browser and Node.js	6.5 Medium	Apr 24, 2026
CVE-2026-42033	Axios is a promise based HTTP client for the browser and Node.js	7.4 High	Apr 24, 2026
CVE-2026-40938	Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines	7.5 High	Apr 21, 2026
CVE-2026-40895	follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows…	6.9 Medium	Apr 21, 2026
CVE-2026-41242	protobufjs compiles protobuf definitions into JavaScript (JS) functions	9.4 Critical	Apr 18, 2026
CVE-2026-40175	Axios is a promise based HTTP client for the browser and Node.js	4.8 Medium	Apr 10, 2026
CVE-2025-62718	Axios is a promise based HTTP client for the browser and Node.js	6.3 Medium	Apr 9, 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 High	Apr 8, 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 High	Apr 8, 2026
CVE-2026-33810	When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…	7.5 High	Apr 8, 2026
CVE-2026-33815	Memory-safety vulnerability in github.com/jackc/pgx/v5	9.8 Critical	Apr 7, 2026

Other Red Hat products