Tekton Pipelines: VolumeMount path restriction bypass via missing filepath.Clean in /tekton/ check
Moderate severity
GitHub Reviewed
Published
Apr 21, 2026
in
tektoncd/pipeline
•
Updated May 22, 2026
Give feedback on Dependabot alerts