—
GO-2022-0838
Exposure of server configuration in github.com/go-vela/server in github.com/go-vela/compiler
Quick fix
GO-2022-0838 — github.com/go-vela/compiler: upgrade to the fixed version with the command below.
go get github.com/go-vela/compiler@v0.6.1Details
Exposure of server configuration in github.com/go-vela/server in github.com/go-vela/compiler
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/go-vela/compiler
Introduced in:
0Fixed in: 0.6.1Fix
go get github.com/go-vela/compiler@v0.6.1References
- https://github.com/go-vela/compiler/security/advisories/GHSA-gv2h-gf8m-r68j[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2020-26294[ADVISORY]
- https://github.com/go-vela/compiler/commit/f1ace5f8a05c95c4d02264556e38a959ee2d9bda[FIX]
- https://github.com/helm/helm/blob/6297c021cbda1483d8c08a8ec6f4a99e38be7302/pkg/engine/funcs.go#L46-L47[WEB]
- https://pkg.go.dev/github.com/go-vela/compiler/compiler[WEB]