Lucene search
+L

90 matches found

Github Security Blog
Github Security Blog
added 2026/09/18 5:17 p.m.11 views

AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets

Summary The telemetry subsystem embeds a hardcoded auth token "secret" in the public source and transmits raw CLI arguments—including --secret, --jwtsecret, and --httprpcsecret values—to a third-party telemetry endpoint. Details In telemetry/config.go line 12, var authToken = "secret" is committe...

5.9CVSS0.00245EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder