Skip to content
OpenAdvisories

Product · go-vela

worker

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2024-28236

    Insecure Variable Substitution in Vela

    Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. Vela pipelines can use variable substitution combined with insensitive fields like `parameters`, `image` and `entrypoint` to inject secrets into a plugin/im…

    go-vela worker github.com/go-vela/worker Go