Go/github.com/go-vela/sdk-go: high 7.7
Golang SDK for Vela Insecure Variable Substitution
Action: Upgrade github.com/go-vela/sdk-go to 0.23.2 or later.
go get github.com/go-vela/sdk-go@v0.23.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.23.2 | - |
Fixed versions
| 0.23.2 |
Sources
- osv: GHSA-v8mx-hp2q-gw85
- https://github.com/go-vela/sdk-go/security/advisories/GHSA-v8mx-hp2q-gw85
- https://github.com/go-vela/sdk-go/commit/e3a34719badf37928e60f4402abe51f8b50055e1
- https://github.com/go-vela/sdk-go
published · modified · JSON