CVE-2020-26226
Secret disclosure when containing characters that become URI encoded
Summary
Secret disclosure when containing characters that become URI encoded
Original description
The description as published by the source.
Impact
Secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that become encoded when included in a URL.
Patches
Fixed in v17.2.3
Workarounds
Secrets that do not contain characters that become encoded when included in a URL are already masked properly.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
npm
semantic-release
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"17.2.3"}]}]
References
- advisory nvd.nist.gov
- web github.com
- web github.com