Lucene search
GoogleOSV:CVE-2020-26226HistoryNov 18, 2020 - 10:15 p.m.
CVE-2020-26226
2020-11-1822:15:12
Google
osv.dev
2
cve-2020-26226
npm package
semantic-release
vulnerability
url encoding
disclosure
fix
In the npm package semantic-release before version 17.2.3, secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that become encoded when included in a URL. Secrets that do not contain characters that become encoded when included in a URL are already masked properly. The issue is fixed in version 17.2.3.
Related
githubexploit
githubexploit
prion
prion
Code injection
2020-11-18 22:15:00
cve
cve
CVE-2020-26226
2020-11-18 22:15:12
nodejs
nodejs
Secret disclosure
2020-11-18 21:21:51
nvd
nvd
CVE-2020-26226
2020-11-18 22:15:12
cvelist
cvelist
CVE-2020-26226 Secret disclosure in semantic-release
2020-11-18 21:35:14
osv
osv
Secret disclosure when containing characters that become URI encoded
2020-11-18 21:19:14
veracode
veracode
Information Disclosure
2020-11-19 05:05:07
github
github
Secret disclosure when containing characters that become URI encoded
2020-11-18 21:19:14