Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/go-vela/server

3 known vulnerabilities (1 critical, 2 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 critical, 2 high
Registry
pkg.go.dev

Advisories 3

  • Vela Server has Insufficient Webhook Payload Data Verification

    Affected: fixed in 0.25.3; from 0.26.0, fixed in 0.26.3; fixed in 0.25.3; from 0.26.0, fixed in 0.26.3.

  • CVE-2022-39395Critical 9.6

    Vela Insecure Defaults

    Affected: fixed in 0.16.0.

  • Reject unauthorized access with GitHub PATs

    Affected: from 0.7.0, fixed in 0.7.5.