Go-Vela
5 CVEs across 5 Go-Vela products. Browse Go-Vela vulnerabilities, severities, and proof-of-concept exploits.
Go-Vela products with known CVEs
Go-Vela CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-27616 | High | 8.5 | 2025-03-10 | Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. Prior to versions 0.25.3 and 0.26.3, by spoofing a webho… |
CVE-2024-28236 | High | 7.7 | 2024-03-12 | Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. Vela pipelines can use variable substitution combined wi… |
CVE-2022-39395 | Critical | 9.6 | 2022-11-10 | Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. In Vela Server and Vela Worker prior to version 0.16.0 a… |
CVE-2021-21432 | High | 7.5 | 2021-04-09 | Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. An authentication mechanism added in version 0.7.0 enabl… |
CVE-2020-26294 | High | 7.4 | 2021-01-04 | Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. In Vela compiler before version 0.6.1 there is a vulnera… |