CVE-2020-26226

In the npm package semantic-release before version 17.2.3, secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that become encoded when included in a URL. Secrets that do not contain characters that become encoded when included in a U...

CVE-2020-26226

creationtimestamp| type| source ---|---|--- 2020-11-19 00:40:41+00:00| seen| https://t.me/cibsecurity/16564 2020-12-09 06:25:20+00:00| seen| https://t.me/cibsecurity/17398...

CVE-2020-26226

In the npm package semantic-release before version 17.2.3, secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that become encoded when included in a URL. Secrets that do not contain characters that become encoded when included in a U...

CVE-2020-26226 Secret disclosure in semantic-release

In the npm package semantic-release before version 17.2.3, secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that become encoded when included in a URL. Secrets that do not contain characters that become encoded when included in a U...

CVE-2020-26226

CVE-2020-26226 affects the npm package semantic-release (pre-17.2.3). The vulnerability causes secrets that should be masked to be disclosed when they contain characters that become URI-encoded in a URL. The issue is resolved in version 17.2.3; upgrade to 17.2.3 or newer to mitigate. The CVSS met...

@arbetsmyra/semantic-release-config (>=1.0.2, <=1.1.4), @crystal-ball/semantic-release-base (>=2.13.0, <=2.22.0) +17 more potentially affected by CVE-2020-26226 via semantic-release (>=17.0.1, <=17.2.2)

semantic-release NPM version =17.0.1, =1.0.2, =2.13.0, =1.63.0, =2.0.0, =10.1.2, =1.2.0, =1.0.0, =1.4.0, =4.0.19, =8.0.0, =2.4.9, =10.0.0, =11.0.0 and more Source cves: CVE-2020-26226 Source advisory: OSV:GHSA-R2J6-P67H-Q639...