Skip to content

Product

go-vela github.com/go-vela/cli vulnerabilities

1 published CVE affecting go-vela github.com/go-vela/cli, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest go-vela github.com/go-vela/cli CVEs

Newest publication first

  1. GHSA-4jhj-3gv3-c3gr CLI for Vela Insecure Variable Substitution

    Published
    HighCVSS 7.7

    Impact Vela pipelines can use variable substitution combined with insensitive fields like parameters, image and entrypoint to inject secrets into a plugin/image and — by using common substitution string manipulation — can bypass log masking and expose secrets without the use of t...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.