github.com/woodpecker-ci/woodpecker
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Woodpecker does not validate webhook before changing any data | github.com/woodpecker-ci/woodpecker | Go | High | Fix reported | |
| Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend | github.com/woodpecker-ci/woodpeckergo.woodpecker-ci.org/woodpecker/v2 | Go | High | Fix reported | |
| Woodpecker allows cross-site scripting (XSS) via build logs | github.com/woodpecker-ci/woodpecker | Go | Medium | Fix reported |