GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline