VendorsWoodpecker CIwoodpeckerany version
Vulnerabilities

Woodpecker CI Woodpecker any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2024-41121
Custom workspace allow to overwrite plugin entrypoint executable in Woodpecker
Published 2024-07-19 · Modified
8.8EPSS 0.007
CVE-2024-41122
Custom environment variables allow to alter execution flow of plugins in Woodpecker
Published 2024-07-19 · Modified
8.8EPSS 0.006
CVE-2023-40034
Repositoty takeover in woodpecker-ci
Published 2023-08-16 · Modified
8.1EPSS 0.009
CVE-2022-29947
Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping.
Published 2022-04-29 · Modified
6.1EPSS 0.007