Lucene search
+L

96 matches found

OSV
OSV
•added 2026/09/18 5:17 p.m.•8 views

GHSA-W72W-9QMJ-C9QM AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets

Summary The telemetry subsystem embeds a hardcoded auth token "secret" in the public source and transmits raw CLI arguments—including --secret, --jwtsecret, and --httprpcsecret values—to a third-party telemetry endpoint. Details In telemetry/config.go line 12, var authToken = "secret" is committe...

5.9CVSS5.7AI score0.003EPSS
SaveExploits0References4
Rows per page
Query Builder