—
GO-2022-0440
Woodpecker allows cross-site scripting (XSS) via build logs in github.com/woodpecker-ci/woodpecker
Quick fix
GO-2022-0440 — github.com/woodpecker-ci/woodpecker: upgrade to the fixed version with the command below.
go get github.com/woodpecker-ci/woodpecker@v0.15.1Details
Woodpecker allows cross-site scripting (XSS) via build logs in github.com/woodpecker-ci/woodpecker
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/woodpecker-ci/woodpecker
Introduced in:
0Fixed in: 0.15.1Fix
go get github.com/woodpecker-ci/woodpecker@v0.15.1