Lucene search
GoogleOSV:GHSA-R2J6-P67H-Q639HistoryNov 18, 2020 - 9:19 p.m.
Secret disclosure when containing characters that become URI encoded
2020-11-1821:19:14
Google
osv.dev
8
secrets disclosure
url encoding
semantic-release
vulnerability
patched
workaround
software
EPSS
0.001
Percentile
48.8%
Impact
Secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that become encoded when included in a URL.
Patches
Fixed in v17.2.3
Workarounds
Secrets that do not contain characters that become encoded when included in a URL are already masked properly.
Related
osv
osv
CVE-2020-26226
2020-11-18 22:15:12
prion
prion
Code injection
2020-11-18 22:15:00
githubexploit
githubexploit
cve
cve
CVE-2020-26226
2020-11-18 22:15:12
nodejs
nodejs
Secret disclosure
2020-11-18 21:21:51
nvd
nvd
CVE-2020-26226
2020-11-18 22:15:12
cvelist
cvelist
CVE-2020-26226 Secret disclosure in semantic-release
2020-11-18 21:35:14
veracode
veracode
Information Disclosure
2020-11-19 05:05:07
github
github
Secret disclosure when containing characters that become URI encoded
2020-11-18 21:19:14