Lucene search
GoogleOSV:GHSA-2XWV-3CC9-FP7CHistorySep 11, 2019 - 11:07 p.m.
Sensitive Data Exposure in seneca
2019-09-1123:07:57
Google
osv.dev
4
0.001 Low
EPSS
Percentile
47.4%
Versions of seneca prior to 3.9.0 are vulnerable to Sensitive Data Exposure. When a process using the package crashes all environment variables are printed. This may leak sensitive data such as access keys, especially given scenarios when log-monitoring systems store the error output.
Recommendation
Upgrade to version 3.9.0 or later.
Related
cve
cve
CVE-2019-5483
2019-09-09 17:15:14
nodejs
nodejs
Sensitive Data Exposure
2019-09-06 18:20:18
nvd
nvd
CVE-2019-5483
2019-09-09 17:15:14
veracode
veracode
Information Disclosure
2019-09-04 06:36:53
hackerone
hackerone
Node.js third-party modules: environment variable leakage in error reporting
2019-04-04 08:41:17
prion
prion
Design/Logic Flaw
2019-09-09 17:15:00
osv
osv
CVE-2019-5483
2019-09-09 17:15:14
github
github
Sensitive Data Exposure in seneca
2019-09-11 23:07:57
githubexploit
githubexploit
cvelist
cvelist
CVE-2019-5483
2019-09-09 16:53:58