Tekton Pipelines: Controller can panic when setting long resolver names in TaskRun/PipelineRun

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-33022 · CVE overview and exploitation status

EUVD-2026-13615

GHSA-cv4x-93xx-wgfj

GO-2026-4730

cve-program · CVE-2026-33022

• https://github.com/tektoncd/pipeline/security/advisories/GHSA-cv4x-93xx-wgfj
• https://github.com/tektoncd/pipeline/commit/5eead3f859b9f938e86039e4d29185092c1d4ee6

euvd · EUVD-2026-13615

• https://github.com/tektoncd/pipeline/security/advisories/GHSA-cv4x-93xx-wgfj
• https://github.com/tektoncd/pipeline/commit/5eead3f859b9f938e86039e4d29185092c1d4ee6

nvd · CVE-2026-33022

• https://github.com/tektoncd/pipeline/commit/5eead3f859b9f938e86039e4d29185092c1d4ee6
• https://github.com/tektoncd/pipeline/security/advisories/GHSA-cv4x-93xx-wgfj

osv · GHSA-cv4x-93xx-wgfj

• https://github.com/tektoncd/pipeline/security/advisories/GHSA-cv4x-93xx-wgfj
• https://nvd.nist.gov/vuln/detail/CVE-2026-33022
• https://github.com/tektoncd/pipeline/commit/01673237c464cfac7e286183f5c9e9d6ec951a64
• https://github.com/tektoncd/pipeline/commit/0fa2d66cff814838c3a10cce252104c7fe618932
• https://github.com/tektoncd/pipeline/commit/5e4905fb6754efa5ecea54de195738d73fb0e01d
• https://github.com/tektoncd/pipeline/commit/5eead3f859b9f938e86039e4d29185092c1d4ee6
• https://github.com/tektoncd/pipeline/commit/ebc197e2b9733deedaa1624212ec66dcdf61eaaf
• https://github.com/tektoncd/pipeline/commit/edc64bbf22323fcf218170f19047c9bcd8163e90
• https://github.com/tektoncd/pipeline

osv · GO-2026-4730

• https://github.com/tektoncd/pipeline/security/advisories/GHSA-cv4x-93xx-wgfj
• https://github.com/tektoncd/pipeline/commit/5eead3f859b9
• https://github.com/tektoncd/pipeline/commit/01673237c464
• https://github.com/tektoncd/pipeline/commit/edc64bbf2232
• https://github.com/tektoncd/pipeline/commit/0fa2d66cff81
• https://github.com/tektoncd/pipeline/commit/5e4905fb6754
• https://github.com/tektoncd/pipeline/commit/ebc197e2b973

No related changes are available here.