Executive brief
Vela Insecure Defaults in github.com/go-vela/server
Affected products
- Go github.com/go-vela/worker
- Go github.com/go-vela/server
Junglewise Threat Intelligence
CVE-2022-39395: GO-2022-1100 - Vela Insecure Defaults in github.com/go-vela/server
CVE-2022-39395 · Severity: low · CVSS 3.1 · Published 2024-08-21
Technologies: github.com/go-vela/server (Go). Vendors: Go.
Related threats
- GO-2025-3509 - Vela Server Has Insufficient Webhook Payload Data Verification in github.com/go-vela/server
- GO-2022-0812 - Reject unauthorized access with GitHub PATs in github.com/go-vela/server
- GO-2024-2641 - Insecure Variable Substitution in Vela in github.com/go-vela/worker
- GO-2024-2648 - Server/API for Vela Insecure Variable Substitution in github.com/go-vela/server
- Server/API for Vela Insecure Variable Substitution