CRITICAL9.9Go
GHSA-5m7g-pj8w-7593· CVE-2022-39395, GHSA-2w78-ffv6-p46wVela Insecure Defaults
Modified: 2/4/2026
package
Go/github.com/go-vela/server
pkg:go/github.com/go-vela/server
HIGH7.7Go
GHSA-69p4-j5v5-x234· GO-2024-2648Server/API for Vela Insecure Variable Substitution
Modified: 6/4/2024
HIGH7.5Go
GHSA-8j3f-mhq8-gmh4· CVE-2021-21432, GO-2022-0812Reject unauthorized access with GitHub PATs
Modified: 7/8/2026
HIGH8.5Go
GHSA-9m63-33q3-xq5x· CVE-2025-27616, GO-2025-3509Vela Server Has Insufficient Webhook Payload Data Verification
Modified: 3/14/2025
—Go
GO-2022-0812· CVE-2021-21432, GHSA-8j3f-mhq8-gmh4Reject unauthorized access with GitHub PATs in github.com/go-vela/server
Modified: 3/3/2026
—Go
GO-2022-1100· CVE-2022-39395, GHSA-2w78-ffv6-p46wVela Insecure Defaults in github.com/go-vela/server
Modified: 3/3/2026
—Go
GO-2024-2648· GHSA-69p4-j5v5-x234Server/API for Vela Insecure Variable Substitution in github.com/go-vela/server
Modified: 3/3/2026
—Go
GO-2025-3509· CVE-2025-27616, GHSA-9m63-33q3-xq5xVela Server Has Insufficient Webhook Payload Data Verification in github.com/go-vela/server
Modified: 3/3/2026