HIGHGo
GHSA-g7mm-9vx7-jm7h· CVE-2026-50141, GO-2026-5976Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation
Modified: 7/21/2026
package
Go/go.woodpecker-ci.org/woodpecker/v3
pkg:go/go.woodpecker-ci.org/woodpecker/v3
HIGHGo
GHSA-qf34-295c-26v8· CVE-2026-61549, GO-2026-5992Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend
Modified: 7/21/2026
—Go
GO-2026-5976· CVE-2026-50141, GHSA-g7mm-9vx7-jm7hWoodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker
Modified: 7/21/2026
—Go
GO-2026-5992· CVE-2026-61549, GHSA-qf34-295c-26v8Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker
Modified: 7/21/2026