go-vela vulnerabilities
5 published CVEs name go-vela among the affected products.
- 5Published CVEs5 of them scored
- 0Last 12 monthspublished in the last year
- 1Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-27616
Vela Server has Insufficient Webhook Payload Data Verification
go-vela · server
High8.6 - CVE-2024-28236
Insecure Variable Substitution in Vela
go-vela · worker
High7.7 - CVE-2022-39395
Vela Insecure Defaults
go-vela · server
Critical9.6 - CVE-2021-21432
Reject unauthorized access with GitHub PATs
go-vela · server
High7.5 - CVE-2020-26294
Exposure of server configuration
go-vela · compiler
High7.4