Lucene search
Dan BjorgeNODEJS:1582HistoryNov 18, 2020 - 9:21 p.m.
Secret disclosure
2020-11-1821:21:51
Dan Bjorge
www.npmjs.com
27
secrets
disclosure
encoded characters
url
upgrade
software
EPSS
0.001
Percentile
48.8%
Overview
Secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that become encoded when included in a URL.
Recommendation
Upgrade to version 17.2.3 or later
References
Related
githubexploit
githubexploit
prion
prion
Code injection
2020-11-18 22:15:00
osv
osv
CVE-2020-26226
2020-11-18 22:15:12
Secret disclosure when containing characters that become URI encoded
2020-11-18 21:19:14
cve
cve
CVE-2020-26226
2020-11-18 22:15:12
nvd
nvd
CVE-2020-26226
2020-11-18 22:15:12
cvelist
cvelist
CVE-2020-26226 Secret disclosure in semantic-release
2020-11-18 21:35:14
veracode
veracode
Information Disclosure
2020-11-19 05:05:07
github
github
Secret disclosure when containing characters that become URI encoded
2020-11-18 21:19:14