@3dlook/camera (>=2.1.0, <=2.2.0), @activescott/cookieconsent (>=1.0.0-beta.2, <=4.0.6) +408 more potentially affected by CVE-2022-31051 via semantic-release (>=17.0.4, <=19.0.2)

semantic-release NPM version =17.0.4, =2.1.0, =1.0.0-beta.2, =2.3.0, =1.0.0, =1.2.0, =1.0.0, =1.0.0, =2.1.2, =1.0.1, =3.0.0, =1.0.0, =1.33.1, =1.0.27, =1.0.29, =1.0.36 and more Source cves: CVE-2022-31051 Source advisory: OSV:GHSA-X2PG-MJHR-2M5X...

CVE-2022-31051 Exposure of Sensitive Information to an Unauthorized Actor in semantic-release

semantic-release is an open source npm package for automated version management and package publishing. In affected versions secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that are excluded from uri encoding by encodeURI...

CVE-2022-31051

CVE-2022-31051 affects the open‑source npm package semantic-release . The vulnerability causes concealed secrets to be disclosed when they contain characters that are not encoded by encodeURI , in contexts where pushing to the repository requires modifying the URL to inject credentials. Public re...

CVE-2022-31051 Exposure of Sensitive Information to an Unauthorized Actor in semantic-release

semantic-release is an open source npm package for automated version management and package publishing. In affected versions secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that are excluded from uri encoding by encodeURI...

CVE-2022-31051 Exposure of Sensitive Information to an Unauthorized Actor in semantic-release

semantic-release is an open source npm package for automated version management and package publishing. In affected versions secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that are excluded from uri encoding by encodeURI...