Go-Vela

5 CVEs across 5 Go-Vela products. Browse Go-Vela vulnerabilities, severities, and proof-of-concept exploits.

Go-Vela products with known CVEs

ProductCVEs
Server3
Worker2
Compiler1
Ui1
Vela1
Go-Vela CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-27616High8.52025-03-10Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. Prior to versions 0.25.3 and 0.26.3, by spoofing a webho…
CVE-2024-28236High7.72024-03-12Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. Vela pipelines can use variable substitution combined wi…
CVE-2022-39395Critical9.62022-11-10Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. In Vela Server and Vela Worker prior to version 0.16.0 a…
CVE-2021-21432High7.52021-04-09Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. An authentication mechanism added in version 0.7.0 enabl…
CVE-2020-26294High7.42021-01-04Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. In Vela compiler before version 0.6.1 there is a vulnera…