{"id":"CGA-xv54-5g4r-hfxg","modified":"2026-01-12T00:35:47.562245Z","published":"2025-11-23T10:45:53.091285Z","withdrawn":"2026-01-12T00:35:47.562245Z","related":["CGA-xv54-5g4r-hfxg","CVE-2025-47914","GHSA-f6x5-jh6r-wrfv"],"affected":[{"package":{"name":"tekton-pipelines-1.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xv54-5g4r-hfxg.json"}},{"package":{"name":"tekton-pipelines-controller-1.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-controller-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xv54-5g4r-hfxg.json"}},{"package":{"name":"tekton-pipelines-controller-1.4-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-controller-1.4-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xv54-5g4r-hfxg.json"}},{"package":{"name":"tekton-pipelines-entrypoint-1.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-entrypoint-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xv54-5g4r-hfxg.json"}},{"package":{"name":"tekton-pipelines-entrypoint-1.4-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-entrypoint-1.4-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xv54-5g4r-hfxg.json"}},{"package":{"name":"tekton-pipelines-events-1.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-events-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xv54-5g4r-hfxg.json"}},{"package":{"name":"tekton-pipelines-events-1.4-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-events-1.4-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xv54-5g4r-hfxg.json"}},{"package":{"name":"tekton-pipelines-nop-1.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-nop-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xv54-5g4r-hfxg.json"}},{"package":{"name":"tekton-pipelines-nop-1.4-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-nop-1.4-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xv54-5g4r-hfxg.json"}},{"package":{"name":"tekton-pipelines-resolvers-1.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-resolvers-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xv54-5g4r-hfxg.json"}},{"package":{"name":"tekton-pipelines-resolvers-1.4-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-resolvers-1.4-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xv54-5g4r-hfxg.json"}},{"package":{"name":"tekton-pipelines-sidecarlogresults-1.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-sidecarlogresults-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xv54-5g4r-hfxg.json"}},{"package":{"name":"tekton-pipelines-sidecarlogresults-1.4-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-sidecarlogresults-1.4-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xv54-5g4r-hfxg.json"}},{"package":{"name":"tekton-pipelines-webhook-1.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-webhook-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xv54-5g4r-hfxg.json"}},{"package":{"name":"tekton-pipelines-webhook-1.4-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-webhook-1.4-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xv54-5g4r-hfxg.json"}},{"package":{"name":"tekton-pipelines-workingdirinit-1.4","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-workingdirinit-1.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xv54-5g4r-hfxg.json"}},{"package":{"name":"tekton-pipelines-workingdirinit-1.4-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tekton-pipelines-workingdirinit-1.4-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-xv54-5g4r-hfxg.json"}}],"schema_version":"1.7.3"}