CLEANSTART-2026-SI08105

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-SI08105.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-SI08105
Upstream
  • CVE-2026-25679
  • CVE-2026-27139
  • CVE-2026-27142
  • ghsa-273p-m2cw-6833
  • ghsa-4c4x-jm2x-pf9j
  • ghsa-4qg8-fj49-pxjh
  • ghsa-59jp-pj84-45mr
  • ghsa-72c7-4g63-hpw5
  • ghsa-846p-jg2w-w324
  • ghsa-f6x5-jh6r-wrfv
  • ghsa-fcv2-xgw5-pqxf
  • ghsa-fphv-w9fq-2525
  • ghsa-j5w8-q4qc-rx2x
  • ghsa-jqc5-w2xx-5vq4
  • ghsa-whqx-f9j3-ch6m
Published
2026-04-01T09:44:24.176947Z
Modified
2026-05-28T22:15:41.349923658Z
Summary
Security fixes for CVE-2025-15558, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-59jp-pj84-45mr, ghsa-72c7-4g63-hpw5, ghsa-846p-jg2w-w324, ghsa-f6x5-jh6r-wrfv, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-j5w8-q4qc-rx2x, ghsa-jqc5-w2xx-5vq4, ghsa-whqx-f9j3-ch6m applied in versions: 0.26.0-r0, 0.26.0-r1, 0.26.0-r2, 0.26.0-r3
Details

Multiple security vulnerabilities affect the tekton-chains package. These issues are resolved in later releases. See references for individual vulnerability details.

References

Affected packages

CleanStart / tekton-chains

Package

Name
tekton-chains

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.26.0-r3

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-SI08105.json"