Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

Woodpecker CI

Woodpecker is a simple yet powerful CI/CD engine with great extensibility.
Collective - Host: opensource - https://opencollective.com/woodpecker-ci - Website: https://woodpecker-ci.org/ - Code: https://github.com/woodpecker-ci

High

woodpecker: GSA_kwCzR0hTQS14dzM1LXJyY3AtZzd4bc4AA-Az

Woodpecker's custom workspace allow to overwrite plugin entrypoint executable
Ecosystems: go
Packages: go.woodpecker-ci.org/woodpecker, go.woodpecker-ci.org/woodpecker/v2
Source: github
Published: 5 months ago

Moderate

woodpecker: GSA_kwCzR0hTQS0zd2YyLTJwcTQtNHJ2Y84AA-Ay

Woodpecker's custom environment variables allow to alter execution flow of plugins
Ecosystems: go
Packages: go.woodpecker-ci.org/woodpecker, go.woodpecker-ci.org/woodpecker/v2
Source: github
Published: 5 months ago

High

woodpecker: GSA_kwCzR0hTQS00Z2NmLTVtMzktOThtY84AA1WL

Woodpecker does not validate webhook before changing any data
Ecosystems: go
Packages: github.com/woodpecker-ci/woodpecker
Source: github
Published: over 1 year ago

Moderate

woodpecker: GSA_kwCzR0hTQS12bXA1LWM1aHAtNmM2Nc1RJQ

Woodpecker allows cross-site scripting (XSS) via build logs
Ecosystems: go
Packages: github.com/woodpecker-ci/woodpecker
Source: github
Published: over 2 years ago