CRITICAL9.9Go
GHSA-5m7g-pj8w-7593· CVE-2022-39395, GHSA-2w78-ffv6-p46wVela Insecure Defaults
Modified: 2/4/2026
package
Go/github.com/go-vela/worker
pkg:go/github.com/go-vela/worker
HIGH7.7Go
GHSA-pwx5-6wxg-px5h· CVE-2024-28236, GO-2024-2641Insecure Variable Substitution in Vela
Modified: 9/10/2026
—Go
GO-2022-1100· CVE-2022-39395, GHSA-2w78-ffv6-p46wVela Insecure Defaults in github.com/go-vela/server
Modified: 3/3/2026
—Go
GO-2024-2641· CVE-2024-28236, GHSA-pwx5-6wxg-px5hInsecure Variable Substitution in Vela in github.com/go-vela/worker
Modified: 3/3/2026