Executive brief
Server/API for Vela Insecure Variable Substitution in github.com/go-vela/server
Affected products
- Go github.com/go-vela/server
Junglewise Threat Intelligence
GO-2024-2648 - Server/API for Vela Insecure Variable Substitution in github.com/go-vela/server
Severity: info ยท Published 2024-06-04
Technologies: github.com/go-vela/server (Go). Vendors: Go.
Related threats
- GO-2025-3509 - Vela Server Has Insufficient Webhook Payload Data Verification in github.com/go-vela/server
- GO-2022-1100 - Vela Insecure Defaults in github.com/go-vela/server
- GO-2022-0812 - Reject unauthorized access with GitHub PATs in github.com/go-vela/server
- Server/API for Vela Insecure Variable Substitution