PYSEC-2020-41

2020-03-1917:15:00

Google

osv.dev

0.001 Low

EPSS

Percentile

20.4%

JSON

In EasyBuild before version 4.1.2, the GitHub Personal Access Token (PAT) used by EasyBuild for the GitHub integration features (like --new-pr, --fro,-pr, etc.) is shown in plain text in EasyBuild debug log files. This issue is fixed in EasyBuild v4.1.2, and in the master+ develop branches of the easybuild-framework repository.

CPENameOperatorVersion
easybuild-frameworkeq3.9.2
easybuild-frameworkeq3.9.4
easybuild-frameworkeq3.9.3
easybuild-frameworkeq3.0.1
easybuild-frameworkeq3.8.0
easybuild-frameworkeq3.5.0
easybuild-frameworkeq1.11.0
easybuild-frameworkeq3.5.3
easybuild-frameworkeq1.8.0
easybuild-frameworkeq3.2.0

Name	Operator	Version
easybuild-framework	eq	3.9.2
easybuild-framework	eq	3.9.4
easybuild-framework	eq	3.9.3
easybuild-framework	eq	3.0.1
easybuild-framework	eq	3.8.0
easybuild-framework	eq	3.5.0
easybuild-framework	eq	1.11.0
easybuild-framework	eq	3.5.3
easybuild-framework	eq	1.8.0
easybuild-framework	eq	3.2.0