go.woodpecker-ci.org/woodpecker/v2
Activity
- Latest release
- 1y ago
- Total releases
- 19
- Cadence
- ~13 days
- Last 12 months
- 0
Details
- First release
- Dec 26, 2023
| Version | Released | |
|---|---|---|
v2.8.3
patch
2 CVEs
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev |
v2.8.3
patch
Dependencies (72)
+ 64 more |
|
v2.8.2
patch
2 CVEs
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev |
v2.8.2
patch
Dependencies (72)
+ 64 more |
|
v2.8.1
patch
2 CVEs
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev |
v2.8.1
patch
Dependencies (72)
+ 64 more |
|
v2.8.0
minor
2 CVEs
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev |
v2.8.0
minor
Dependencies (72)
+ 64 more |
|
v2.7.3
patch
2 CVEs
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev |
v2.7.3
patch
Dependencies (72)
+ 64 more |
|
v2.7.2
patch
2 CVEs
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev |
v2.7.2
patch
Dependencies (72)
+ 64 more |
|
v2.7.1
patch
2 CVEs
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev |
v2.7.1
patch
Dependencies (72)
+ 64 more |
|
v2.6.1
patch
4 CVEs
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v2.6.1
patch
Dependencies (70)
+ 62 more |
|
v2.7.0
minor
2 CVEs
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev |
v2.7.0
minor
Dependencies (72)
+ 64 more |
|
v2.6.0
minor
4 CVEs
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v2.6.0
minor
Dependencies (70)
+ 62 more |
|
v2.5.0
minor
4 CVEs
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v2.5.0
minor
Dependencies (69)
+ 61 more |
|
v2.4.1
patch
4 CVEs
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v2.4.1
patch
Dependencies (67)
+ 59 more |
|
v2.4.0
minor
4 CVEs
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v2.4.0
minor
Dependencies (67)
+ 59 more |
|
v2.3.0
minor
4 CVEs
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v2.3.0
minor
Dependencies (61)
+ 53 more |
|
v2.2.2
patch
4 CVEs
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v2.2.2
patch
Dependencies (61)
+ 53 more |
|
v2.2.1
patch
4 CVEs
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v2.2.1
patch
Dependencies (61)
+ 53 more |
|
v2.2.0
minor
4 CVEs
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v2.2.0
minor
Dependencies (61)
+ 53 more |
|
v2.1.1
patch
4 CVEs
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v2.1.1
patch
Dependencies (61)
+ 53 more |
|
v2.1.0
initial
4 CVEs
CVE-2026-50141
GO-2026-5976
GHSA-g7mm-9vx7-jm7h
Jul 17, 2026
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation in go.woodpecker-ci.org/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2026-61549
GO-2026-5992
GHSA-qf34-295c-26v8
Jul 17, 2026
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker References Updated Jul 21, 2026 · Source: OSV.dev
CVE-2024-41121
GO-2024-2999
GHSA-xw35-rrcp-g7xm
Aug 06, 2024
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev
CVE-2024-41122
GO-2024-2998
GHSA-3wf2-2pq4-4rvc
Aug 06, 2024
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker Fixed in
2.7.0
References
Updated Mar 03, 2026 · Source: OSV.dev |
v2.1.0
initial
Dependencies (61)
+ 53 more |