go.woodpecker-ci.org/woodpecker
Activity
- Latest release
- 2y ago
- Total releases
- 20
- Cadence
- ~23 days
- Last 12 months
- 0
Details
- First release
- Jan 31, 2022
| Version | Released | |
|---|---|---|
v1.0.5
patch
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.0.5
patch
Dependencies (55)
+ 47 more |
|
v1.0.4
patch
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.0.4
patch
Dependencies (55)
+ 47 more |
|
v1.0.3
patch
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.0.3
patch
Dependencies (55)
+ 47 more |
|
v1.0.2
patch
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.0.2
patch
Dependencies (55)
+ 47 more |
|
v1.0.1
patch
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.0.1
patch
Dependencies (55)
+ 47 more |
|
v1.0.0
major
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.0.0
major
Dependencies (55)
+ 47 more |
|
v1.0.0-rc1
pre
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v1.0.0-rc1
pre
Dependencies (55)
+ 47 more |
|
v0.15.11
patch
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v0.15.11
patch
Dependencies (41)
+ 33 more |
|
v0.15.10
patch
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v0.15.10
patch
Dependencies (41)
+ 33 more |
|
v0.15.9
patch
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v0.15.9
patch
Dependencies (41)
+ 33 more |
|
v0.15.8
patch
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v0.15.8
patch
Dependencies (41)
+ 33 more |
|
v0.15.7
patch
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v0.15.7
patch
Dependencies (40)
+ 32 more |
|
v0.15.6
patch
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v0.15.6
patch
Dependencies (40)
+ 32 more |
|
v0.15.5
patch
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v0.15.5
patch
Dependencies (40)
+ 32 more |
|
v0.15.4
patch
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v0.15.4
patch
Dependencies (40)
+ 32 more |
|
v0.15.3
patch
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v0.15.3
patch
Dependencies (40)
+ 32 more |
|
v0.15.2
patch
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v0.15.2
patch
Dependencies (40)
+ 32 more |
|
v0.15.1
patch
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v0.15.1
patch
Dependencies (40)
+ 32 more |
|
v0.15.0
initial
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v0.15.0
initial
Dependencies (40)
+ 32 more |
|
v0.15.0-rc2
pre
4 CVEs
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker References
Updated Mar 03, 2026 · Source: OSV.dev |
v0.15.0-rc2
pre
Dependencies (40)
+ 32 more |