{"schema_version":"1.7.5","id":"CGA-3v45-wr3m-8cgj","published":"2026-03-19T13:45:07.896735Z","modified":"2026-09-07T02:03:10.762051800Z","withdrawn":"2026-09-07T02:03:10.762051689Z","related":["CVE-2026-33211","GHSA-j5q5-j9gm-2w5c","GO-2026-4761"],"affected":[{"package":{"name":"tekton-chains","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-chains"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-chains-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-chains-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.2-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-controller-1.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-controller-1.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-controller-1.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-controller-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-controller-1.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-controller-1.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-controller-fips-1.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-controller-fips-1.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-entrypoint-1.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-entrypoint-1.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-entrypoint-1.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-entrypoint-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-entrypoint-1.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-entrypoint-1.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-entrypoint-fips-1.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-entrypoint-fips-1.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-events-1.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-events-1.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-events-1.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-events-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-events-fips-1.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-events-fips-1.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-nop-1.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-nop-1.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-nop-1.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-nop-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-resolvers-1.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-resolvers-1.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-resolvers-1.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-resolvers-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-resolvers-1.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-resolvers-1.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-resolvers-fips-1.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-resolvers-fips-1.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-sidecarlogresults-1.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-sidecarlogresults-1.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-sidecarlogresults-1.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-sidecarlogresults-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-sidecarlogresults-1.9","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-sidecarlogresults-1.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-sidecarlogresults-fips-1.7","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-sidecarlogresults-fips-1.7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r14"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-webhook-1.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-webhook-1.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-webhook-1.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-webhook-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-workingdirinit-1.3","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-workingdirinit-1.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-workingdirinit-1.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-workingdirinit-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tkn","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tkn"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tkn-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tkn-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-chains","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-chains"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.2-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-controller-1.3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-controller-1.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-controller-1.4","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-controller-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-controller-1.9","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-controller-1.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-entrypoint-1.3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-entrypoint-1.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-entrypoint-1.4","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-entrypoint-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-entrypoint-1.9","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-entrypoint-1.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-events-1.3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-events-1.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-events-1.4","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-events-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-nop-1.3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-nop-1.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-nop-1.4","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-nop-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-resolvers-1.3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-resolvers-1.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-resolvers-1.4","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-resolvers-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-resolvers-1.9","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-resolvers-1.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-sidecarlogresults-1.3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-sidecarlogresults-1.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-sidecarlogresults-1.4","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-sidecarlogresults-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-sidecarlogresults-1.9","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-sidecarlogresults-1.9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-webhook-1.3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-webhook-1.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-webhook-1.4","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-webhook-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-workingdirinit-1.3","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-workingdirinit-1.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tekton-pipelines-workingdirinit-1.4","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tekton-pipelines-workingdirinit-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r19"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}},{"package":{"name":"tkn","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/tkn"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-3v45-wr3m-8cgj.json"}}]}