CVE-2024-36127 vulnerabilities

Vulnerabilities for packages: melange, pombump...

CVE-2024-36127 apko Exposure of HTTP basic auth credentials in log output

apko is an apk-based OCI image builder. apko exposures HTTP basic auth credentials from repository and keyring URLs in log output. This vulnerability is fixed in v0.14.5...

CVE-2024-36127

The CVE pertains to the apko tool (apk-based OCI image builder) where HTTP basic auth credentials from repository and keyring URLs were exposed in log output. The issue is fixed in v0.14.5. Impact is High (log exposure of credentials) with CVSS 3.1 base score 7.5. Connected sources corroborate th...