Skip to content
OpenAdvisories

Package · Go

github.com/go-vela/cli

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.7
    GHSA-4jhj-3gv3-c3gr

    CLI for Vela Insecure Variable Substitution

    ### Impact Vela pipelines can use variable substitution combined with insensitive fields like `parameters`, `image` and `entrypoint` to inject secrets into a plugin/image and — by using common substitution string manipulation — can bypass log masking and expo…

    github.com/go-vela/cli Go