Executive brief
Server/API for Vela Insecure Variable Substitution
Affected products
- Go github.com/go-vela/server
Junglewise Threat Intelligence
Server/API for Vela Insecure Variable Substitution
Severity: low · CVSS 3.1 · Published 2024-03-15
Technologies: github.com/go-vela/server (Go). Vendors: Go.
Related threats
- GO-2025-3509 - Vela Server Has Insufficient Webhook Payload Data Verification in github.com/go-vela/server
- GO-2022-1100 - Vela Insecure Defaults in github.com/go-vela/server
- GO-2022-0812 - Reject unauthorized access with GitHub PATs in github.com/go-vela/server
- GO-2024-2648 - Server/API for Vela Insecure Variable Substitution in github.com/go-vela/server