Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping.Referenceshttps://github.com/woodpecker-ci/woodpecker/releases/tag/v0.15.1https://github.com/woodpecker-ci/woodpecker/pull/879