Skip to content
OpenAdvisories

Package · Go

github.com/woodpecker-ci/woodpecker

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2022-29947

    Woodpecker allows cross-site scripting (XSS) via build logs

    Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping.

    github.com/woodpecker-ci/woodpecker Go