Woodpecker-ci Woodpecker vulnerabilities
- woodpecker-ci woodpeckerWoodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend9.0 Critical
- woodpecker-ci woodpeckerWoodpecker < 3.15.0 - GitLab Approval Gate Bypass via Spoofable Commit Author Name9.2 Critical
- woodpecker-ci woodpeckerWoodpecker < 3.15.0 - Unauthenticated NULL Pointer Dereference in /api/orgs/lookup Enables Log-Flooding Denial of Service6.9 Medium
- woodpecker-ci woodpeckerWoodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation7.1 High
- woodpecker-ci woodpeckerCustom environment variables allow to alter execution flow of plugins in Woodpecker7.5 High
- woodpecker-ci woodpeckerCustom workspace allow to overwrite plugin entrypoint executable in Woodpecker8.8 High
- woodpecker-ci woodpeckerRepositoty takeover in woodpecker-ci8.1 High
- woodpecker-ci woodpeckerWoodpecker allows cross-site scripting (XSS) via build logs6.1 Medium