go-vela

Products

Product	CVEs	Exploited	Latest
server	3	–	Mar 10, 2025
compiler	1	–	Jan 4, 2021
worker	1	–	Mar 12, 2024

CVE-2025-27616 High 8.6 Vela Server has Insufficient Webhook Payload Data Verification 0.3%
CVE-2024-28236 High 7.7 Insecure Variable Substitution in Vela 0.7%
CVE-2022-39395 Critical 9.6 Vela Insecure Defaults 1.2%
CVE-2021-21432 High 7.5 Reject unauthorized access with GitHub PATs 1.0%
CVE-2020-26294 High 7.4 Exposure of server configuration 1.8%