CVE-2024-36127
apko Exposure of HTTP basic auth credentials in log output
Summary
apko Exposure of HTTP basic auth credentials in log output
Original description
The description as published by the source.
apko is an apk-based OCI image builder. apko exposures HTTP basic auth credentials from repository and keyring URLs in log output. This vulnerability is fixed in v0.14.5.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com