Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
go.woodpecker-ci.org/woodpecker
Go
· Package
4 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable
CVE-2024-41121 · GHSA-XW35-RRCP-G7XM
Version ranges need review.
go.woodpecker-ci.org/woodpecker/v2
go.woodpecker-ci.org/woodpecker
Go
High
Fix reported
2026-09-10
Woodpecker's custom environment variables allow to alter execution flow of plugins
CVE-2024-41122 · GHSA-3WF2-2PQ4-4RVC
Version ranges need review.
go.woodpecker-ci.org/woodpecker/v2
go.woodpecker-ci.org/woodpecker
Go
Medium
Fix reported
2026-09-10
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend
CVE-2026-61549 · GHSA-QF34-295C-26V8
Version ranges need review.
github.com/woodpecker-ci/woodpecker
go.woodpecker-ci.org/woodpecker/v2
Go
High
Fix reported
2026-07-21
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation
CVE-2026-50141 · GHSA-G7MM-9VX7-JM7H
Version ranges need review.
go.woodpecker-ci.org/woodpecker/v2
go.woodpecker-ci.org/woodpecker/v3
Go
High
Fix reported
2026-07-21
