id: GO-2024-2647
modules:
    - module: github.com/go-vela/cli
      versions:
        - fixed: 0.23.2
      vulnerable_at: 0.23.1
summary: CLI for Vela Insecure Variable Substitution in github.com/go-vela/cli
ghsas:
    - GHSA-4jhj-3gv3-c3gr
references:
    - advisory: https://github.com/go-vela/cli/security/advisories/GHSA-4jhj-3gv3-c3gr
    - fix: https://github.com/go-vela/cli/commit/0349a2060c35722e341bf65a4215592c6c4bc5b4
source:
    id: GHSA-4jhj-3gv3-c3gr
    created: 2024-05-17T16:14:32.912261-04:00
review_status: UNREVIEWED