CVE-2020-26226
Secret disclosure when containing characters that become URI encoded
Résumé
Secret disclosure when containing characters that become URI encoded
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Impact
Secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that become encoded when included in a URL.
Patches
Fixed in v17.2.3
Workarounds
Secrets that do not contain characters that become encoded when included in a URL are already masked properly.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
npm
semantic-release
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"17.2.3"}]}]
Références
- advisory nvd.nist.gov
- web github.com
- web github.com