EUVD-2024-0985

Malicious code in bioql PyPI...

CVE-2020-26294

Vela is a Pipeline Automation CI/CD framework built on Linux container technology written in Golang. In Vela compiler before version 0.6.1 there is a vulnerability which allows exposure of server configuration. It impacts all users of Vela. An attacker can use Sprig's env function to retrieve...

CVE-2024-28236

Vela CVE-2024-28236 describes insecure variable substitution in Vela’s pipelines (go-vela/worker) where substitution into fields such as parameters, image, and entrypoint can leak secrets by bypassing log masking. The issue arises when secrets are injected into a plugin/image and inadvertently pr...