Worker

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-28236 Go MEDIUM PATCH This Month

Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Docker Worker

NVD GitHub

CVSS 3.1

6.5

EPSS

0.7%

CVE-2022-39395 Go CRITICAL PATCH Act Now

Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Server Ui Worker

NVD GitHub

CVSS 3.1

9.9

EPSS

1.1%

CVE-2024-28236 Go

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Information Disclosure Docker Worker

NVD GitHub

CVE-2022-39395 Go

EPSS 1% CVSS 9.9

CRITICAL PATCH Act Now

Privilege Escalation Server Ui +1

NVD GitHub