GO-2024-2998
See a problem?- Source
- https://pkg.go.dev/vuln/GO-2024-2998
- Import Source
- https://vuln.go.dev/ID/GO-2024-2998.json
- JSON Data
- https://api.osv.dev/v1/vulns/GO-2024-2998
- Aliases
- Published
- 2024-08-06T22:03:16Z
- Modified
- 2024-08-06T22:27:05.746050Z
- Summary
- Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker
- Details
-
Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker
- References
-
- https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-3wf2-2pq4-4rvc
- https://nvd.nist.gov/vuln/detail/CVE-2024-41122
- https://github.com/woodpecker-ci/woodpecker/commit/8aa3e5ec82c92eca3279e4be68625111eeedf1c4
- https://github.com/woodpecker-ci/woodpecker/issues/3929
- https://github.com/woodpecker-ci/woodpecker/pull/3909
- https://github.com/woodpecker-ci/woodpecker/pull/3934
Affected packages
Go / go.woodpecker-ci.org/woodpecker
Package
- Name
- go.woodpecker-ci.org/woodpecker
- View open source insights on deps.dev
- Purl
- pkg:golang/go.woodpecker-ci.org/woodpecker
Go / go.woodpecker-ci.org/woodpecker/v2
Package
- Name
- go.woodpecker-ci.org/woodpecker/v2
- View open source insights on deps.dev
- Purl
- pkg:golang/go.woodpecker-ci.org/woodpecker/v2