Red Hat OpenShift Pipelines

• CVE-2026-10840 High 7.1 Openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to kueue and cert-manager resources 0.2%
• CVE-2025-11065 Medium 5.3 Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure 0.5%
• CVE-2025-8556 Low 3.7 Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results 0.5%
• CVE-2024-11831 Medium 5.4 Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript 1.1%
• CVE-2024-9355 Medium 6.5 Golang-fips: golang fips zeroed buffer 0.3%