Skip to content
OpenAdvisories

Package · Go

github.com/go-vela/worker

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.7
    CVE-2024-28236

    Insecure Variable Substitution in Vela

    Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. Vela pipelines can use variable substitution combined with insensitive fields like `parameters`, `image` and `entrypoint` to inject secrets into a plugin/im…

    go-vela worker github.com/go-vela/worker Go
  • Critical 9.6
    CVE-2022-39395

    Vela Insecure Defaults

    Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. In Vela Server and Vela Worker prior to version 0.16.0 and Vela UI prior to version 0.17.0, some default configurations for Vela allow exploitation and cont…

    go-vela server github.com/go-vela/server github.com/go-vela/worker Go