GCVE-110-GO-2026-013273

Advisory Published

Vulnetix · Advisory published October 3, 2026

[P-BASE64] Base64 decoding (possible payload hiding) — matched: command = []string{"echo $CI_SCRIPT | base64 -d | /bin/sh -e"}

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Vendor	Product	Versions	Platforms
go	github.com/anbraten/woodpecker	0.8.101 (affected), 0.8.102 (affected), 0.8.98 (affected), 0.8.95-bitbucket (affected), 0.8.94 (affected)	—

advisory

web

Investigate this vulnerability in the interactive console or download the raw GCVE record.