Junglewise Threat Intelligence

CVE-2024-28236: GO-2024-2641 - Insecure Variable Substitution in Vela in github.com/go-vela/worker

CVE-2024-28236 · Severity: low · CVSS 3.1 · Published 2024-06-04

Vendors: Go.

Executive brief

Insecure Variable Substitution in Vela in github.com/go-vela/worker

Affected products

Go github.com/go-vela/worker

Related threats

GO-2022-1100 - Vela Insecure Defaults in github.com/go-vela/server