{"action":"Upgrade github.com/go-vela/compiler to 0.6.1 or later.","affected":[{"fixed":"0.6.1","introduced":"0"}],"component":"github.com/go-vela/compiler","cve_ids":["CVE-2020-26294"],"ecosystem":"Go","epss":0.01798,"exploited":false,"fixed_versions":["0.6.1"],"ghsa_id":"GHSA-gv2h-gf8m-r68j","id":"tcs_01M5KFX1QA64C4ABH4PD6DC7WF","modified_at":"2026-03-03T04:52:18.875908Z","published_at":"2024-08-21T15:29:04Z","references":["https://osv.dev/vulnerability/GO-2022-0838","https://github.com/go-vela/compiler/security/advisories/GHSA-gv2h-gf8m-r68j","https://nvd.nist.gov/vuln/detail/CVE-2020-26294","https://github.com/go-vela/compiler/commit/f1ace5f8a05c95c4d02264556e38a959ee2d9bda","https://github.com/helm/helm/blob/6297c021cbda1483d8c08a8ec6f4a99e38be7302/pkg/engine/funcs.go#L46-L47","https://pkg.go.dev/github.com/go-vela/compiler/compiler"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0838","url":"https://osv.dev/vulnerability/GO-2022-0838"}],"summary":"Exposure of server configuration in github.com/go-vela/server in github.com/go-vela/compiler"}