CVE-2026-119290

Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core writes rendered reportSummary... notes to GITHUBSTEPSUMMARY through writeJobSummary without applying the redactor that protects resolved secret values in console and persisted run output. A GitHub...

CVE-2026-119290 Zuke: Resolved secret() values are written to GITHUB_STEP_SUMMARY in the clear, disclosing them to anyone who can view the workflow run

Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core writes rendered reportSummary... notes to GITHUBSTEPSUMMARY through writeJobSummary without applying the redactor that protects resolved secret values in console and persisted run output. A GitHub...

CVE-2026-119290

The @zuke/core component in the Zuke build automation system for Deno is vulnerable to information disclosure in versions prior to 1.51.0 . The root cause is that the writeJobSummary function writes reportSummary(...) notes to GITHUB_STEP_SUMMARY without applying the redactor required to protect ...

CVE-2026-119290 Zuke: Resolved secret() values are written to GITHUB_STEP_SUMMARY in the clear, disclosing them to anyone who can view the workflow run

Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core writes rendered reportSummary... notes to GITHUBSTEPSUMMARY through writeJobSummary without applying the redactor that protects resolved secret values in console and persisted run output. A GitHub...

EUVD-2026-114136

Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core writes rendered reportSummary... notes to GITHUBSTEPSUMMARY through writeJobSummary without applying the redactor that protects resolved secret values in console and persisted run output. A GitHub...

CVE-2026-119290: zuke-build zuke: Zuke is a code-first, strongly typed build automation system for Deno

Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core writes rendered reportSummary... notes to GITHUBSTEPSUMMARY through writeJobSummary without applying the redactor that protects resolved secret values in console and persisted run output. A GitHub...