Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

github.com/woodpecker-ci/woodpecker

Woodpecker is a simple, yet powerful CI/CD engine with great extensibility.
https://github.com/woodpecker-ci/woodpecker

High

GSA_kwCzR0hTQS14dzM1LXJyY3AtZzd4bc4AA-Az

Woodpecker's custom workspace allow to overwrite plugin entrypoint executable
Ecosystems: go
Packages: go.woodpecker-ci.org/woodpecker, go.woodpecker-ci.org/woodpecker/v2
Source: github
Published: 5 months ago

Moderate

GSA_kwCzR0hTQS0zd2YyLTJwcTQtNHJ2Y84AA-Ay

Woodpecker's custom environment variables allow to alter execution flow of plugins
Ecosystems: go
Packages: go.woodpecker-ci.org/woodpecker, go.woodpecker-ci.org/woodpecker/v2
Source: github
Published: 5 months ago

High

GSA_kwCzR0hTQS00Z2NmLTVtMzktOThtY84AA1WL

Woodpecker does not validate webhook before changing any data
Ecosystems: go
Packages: github.com/woodpecker-ci/woodpecker
Source: github
Published: over 1 year ago

Moderate

GSA_kwCzR0hTQS12bXA1LWM1aHAtNmM2Nc1RJQ

Woodpecker allows cross-site scripting (XSS) via build logs
Ecosystems: go
Packages: github.com/woodpecker-ci/woodpecker
Source: github
Published: over 2 years ago