CVE-2022-29947: Woodpecker-Ci Woodpecker

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping.

Affected products

• Woodpecker-Ci Woodpecker: before 0.15.1 (fixed in 0.15.1)

Published 2022-04-29. Last modified 2026-06-17.