{"id":"CLEANSTART-2026-HA54107","summary":"Security fixes in tekton-chains 0.25.2-r1","details":"Package tekton-chains version 0.25.2-r1 fixes 23 vulnerabilities: ghsa-gcjh-h69q-9w9g, ghsa-pmwq-pjrm-6p5r, CVE-2026-49478, CVE-2026-48702, CVE-2026-49834...","modified":"2026-09-04T13:31:03.048420403Z","published":"2026-09-01T11:17:16Z","upstream":["CVE-2026-2303","CVE-2026-25542","CVE-2026-39883","CVE-2026-39984","CVE-2026-40161","CVE-2026-40923","CVE-2026-40924","CVE-2026-40938","CVE-2026-41178","CVE-2026-48702","CVE-2026-49478","CVE-2026-49834","CVE-2026-49835","CVE-2026-54787","CVE-2026-56864","CVE-2026-56865","ghsa-259r-337f-4rfw","ghsa-3fxj-6jh8-hvhx","ghsa-9g5q-2w5x-hmxf","ghsa-gcjh-h69q-9w9g","ghsa-hrxh-6v49-42gf","ghsa-pmwq-pjrm-6p5r","ghsa-rjr7-jggh-pgcp"],"database_specific":{},"references":[{"type":"WEB","url":"https://github.com/tektoncd/chains"}],"affected":[{"package":{"name":"tekton-chains","ecosystem":"CleanStart"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25.2-r1"}]}],"versions":["0.25.2-r1"],"database_specific":{"source":"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-HA54107.json"}}],"schema_version":"1.9.0"}