openshift-pipelines/pipelines-opc-rhel9 vulnerabilities

CVEs whose affected-version data names the openshift-pipelines/pipelines-opc-rhel9 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-50240High· 8.8

yesterday

Pipelines-as-code: openshift-pipelines-operator-rh: pipelines-as-code: repository users can trigger namespace edit-equivalent execution via auto-provisioned pipeline serviceaccount

A flaw was found in OpenShift Pipelines-as-Code (PAC). PAC does not verify whether the creator of a Repository custom resource has permission to create PipelineRuns. A namespace user with only Repository and Secret create/delete permissi…

▾ TwilightRed Hat · openshift-builds/openshift-builds-rhel9-operatorEPSS 0.37%via CVEORG