CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

www/webhook 2.8.2_21

Easily create HTTP endpoints (hooks) to execute shell commands

Port info

Maintainer
stb@lassitu.de
Packages
latest: 2.8.2_21
Upstream
Higher version available: 2.8.3
Last update
to 2.8.2_21 · d81b7ba3c3
Quarterly
2026Q4: 2.8.2_21 · last MFH 60647eff54
WWW
https://github.com/adnanh/webhook
Links
cgit · VuXML

Install

Package
# pkg install webhook
installs 2.8.2_21 from latest; from quarterly (2026Q4) 2.8.2_21
Port
# cd /usr/ports/www/webhook && make install clean
Size
3.4 MiB download · 10.0 MiB installed
Depends on
nothing
License
APACHE20 and BSD3CLAUSE and MIT

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 162.8.2_212.8.2_20–
FreeBSD 152.8.2_212.8.2_20–
FreeBSD 142.8.2_212.8.2_202.8.2_21

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 152.8.2_212.8.2_20–
FreeBSD 142.8.2_212.8.2_202.8.2_21

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (1)

The CVE record lists the packaged version 2.8.2_21 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-910808.72026-09-14webhook through 2.8.3 reads the entire request body into memory before evaluating trigger rules, allowing unauthenticated attackers to exhaust memory by sending oversize…

VuXML only (0)

Listed in VuXML, the packaged version 2.8.2_21 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (62)

Dag-Erling Smørgrav (des) · 2.8.2_21 MFH 2026Q4 ✓
various: Bump Go ports for Go 1.26.10 / 1.27.3
d81b7ba3c3
Adam Weinberger (adamw) · 2.8.2_19
many: Bump go ports for 1.26.8 and 1.27.1
dd0905142a
Dag-Erling Smørgrav (des) · 2.8.2_18 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.14 / 1.26.7
4867821cd6
Dag-Erling Smørgrav (des) · 2.8.2_17 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.13 / 1.26.6
6d39dcf04e
Yusuf Yaman (nxjoseph) · 2.8.2_16 MFH 2026Q3 ✓
www/webhook: Fix rc.d reload command

PR:		296833
Reported by:	Tine Jozelj <tine@tjo.space>
Approved by:	Stefan Bethke <stb@lassitu.de> (maintainer)
Approved by:	osa, vvd (Mentors, implicit)
MFH:		2026Q3
f7c372bc6b
Dag-Erling Smørgrav (des) · 2.8.2_15 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.12 / 1.26.5
4ea3547132
Dag-Erling Smørgrav (des) · 2.8.2_14
various: Bump go ports for go-1.25.11 / go-1.26.4
dd8dc2a59d
Adam Weinberger (adamw) · 2.8.2_13
various: Bump ports for Go 1.25.10
4e243a83f8
Dag-Erling Smørgrav (des) · 2.8.2_12
various: Bump go ports for go-1.25.9 / 1.26.2
7507e72a84
Adam Weinberger (adamw) · 2.8.2_11
various: Bump ports for Go 1.25.8
a8d318da7c
Adam Weinberger (adamw) · 2.8.2_10
various: Bump ports for Go default 1.24->1.25
97685c1886
Adam Weinberger (adamw) · 2.8.2_9
various: Bump Go ports for 1.24.13
529df949a5
Adam Weinberger (adamw) · 2.8.2_8
various: Bump Go ports for 1.24.12
013f2d30b0
Adam Weinberger (adamw) · 2.8.2_7
various: Bump Go ports for 1.24.11
b24429e3ed
Adam Weinberger (adamw) · 2.8.2_6
various: Bump Go ports for 1.24.10
0dfced16fb
Adam Weinberger (adamw) · 2.8.2_5
various: Bump go ports for go-1.24.9
90f976619b
Adam Weinberger (adamw) · 2.8.2_4
many: Bump dependent ports after go124 update
2e7587aaf8
Adam Weinberger (adamw) · 2.8.2_3
many: Bump go ports for go-1.24.7
31a5a229a7
Adam Weinberger (adamw) · 2.8.2_2
go ports: Bump for 1.24.6
53610681ea
Adam Weinberger (adamw) · 2.8.2_1
many: Bump PORTREVISION for go-1.24.5 update
275975297b
Jesús Daniel Colmenares Oviedo (dtxdf) · 2.8.2
www/webhook: Update to 2.8.2

- Pet portclippy/portfmt.
- Remove old patches.
- Replace PORTVERSION with DISTVERSION.

ChangeLogs:

- https://github.com/adnanh/webhook/releases/tag/2.8.1
- https://github.com/adnanh/webhook/releases/tag/2.8.2

PR:             287611
Approved by:    maintainer timeout (2 weeks)
Approved by:    acm (mentor)
0b0eb60a4c
Adam Weinberger (adamw) · 2.8.0_27
various: Bump PORTREVISION after go124-1.24.4 update
94be418de3
Adam Weinberger (adamw) · 2.8.0_26
go: Bump go124-dependent ports

Earlier I bumped the default Go to 1.24. Ports that specify a lower
version will still build with those lower version (for now), so they
don't need a bumping. Instead I'm bumping anything that (now) has go124
as a dependency.
0bdd2ad334
Adam Weinberger (adamw) · 2.8.0_25
go: Bump ports for go124 update
a4e30d4f4f
Adam Weinberger (adamw) · 2.8.0_24
Bump all go ports for yesterday's releases
d0642a6176
Ashish SHUKLA (ashish) · 2.8.0_23
all: Bump after lang/go121 update
aa8c0111bf
Ashish SHUKLA (ashish) · 2.8.0_22
all: Bump after lang/go121 update
c4b51c2028
Ashish SHUKLA (ashish) · 2.8.0_21
all: Bump after lang/go121 update

MFH:		2024Q2
746fa696a1
Ashish SHUKLA (ashish) · 2.8.0_20
all: Bump after lang/go121 update

MFH:		2024Q2
fce0cc3272
Ashish SHUKLA (ashish) · 2.8.0_19
all: Bump after lang/go121 update

MFH:		2024Q2
32b284679a
Muhammad Moinur Rahman (bofh) · 2.8.0_18
lang/go: Change DEFAULT to 1.21

PR:		277776
Approved by:	portmgr (exp-run)
a5a000df3b
Ashish SHUKLA (ashish) · 2.8.0_17
all: Bump PORTREVISION after lang/go* update

PR:		276530
7e5aa2085f
Ashish SHUKLA (ashish) · 2.8.0_16
all: Bump PORTREVISION after lang/go* update

PR:		274405
0505b712df
Dmitri Goutnik (dmgk) · 2.8.0_15
all: Bump PORTREVISION after lang/go* update
8e4bc57934
Dmitri Goutnik (dmgk) · 2.8.0_14
all: Bump PORTREVISION after lang/go{119,120} update
09b993031a
Dmitri Goutnik (dmgk) · 2.8.0_13
all: Bump PORTREVISION after lang/go{119,120} update
ff40d94c1d
Robert Clausecker (fuz) · 2.8.0_12
www/webhook: fix build on riscv64

Update golang.org/x/sys dependency to a version new enough to
have the bits for riscv64-freebsd in there.

While we are at it, remove ineffective GH_TUPLE entries (port
has these vendored upstream).

Sponsored by:	Berliner Linux User Group e.V.
Approved by:	portmgr (build fix blanket)
0aa89e9844
Dmitri Goutnik (dmgk) · 2.8.0_11
all: Bump PORTREVISION after Go ports update
09079730e9
Dmitri Goutnik (dmgk) · 2.8.0_10
all: Bump PORTREVISION after lang/go{119,120} update
56b5ec772f
Dmitri Goutnik (dmgk) · 2.8.0_9
all: Bump PORTREVISION after GO_DEFAULT update.
2297efc51b
Dmitri Goutnik (dmgk) · 2.8.0_8
all: Bump PORTVERSION after lang/go{118,119} update
3b383d833a
Dmitri Goutnik (dmgk) · 2.8.0_7
all: Bump PORTREVISION after lang/go{118,119} update
d9ad1002d5
Dmitri Goutnik (dmgk) · 2.8.0_6
all: Bump PORTREVISION after lang/go{118,119} update
bde51869ee
Dmitri Goutnik (dmgk) · 2.8.0_5
all: Bump PORTREVISION after lang/go{118,119} update
f05c98fffb
Stefan Eßer (se) · 2.8.0_4
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.8.0_4
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Dmitri Goutnik (dmgk) · 2.8.0_4
all: Bump PORTREVISION after Go update

Bump Go ports PORTREVISION after GO_DEFAULT and lang/go118 update.
4476f89764
Dmitri Goutnik (dmgk) · 2.8.0_3
all: Bump PORTREVISION after lang/go{117,118} update
153cb65ac8
Dmitri Goutnik (dmgk) · 2.8.0_2
*/*: Bump port revisons after lang/go{117,118} update
309cdeccd8