WS-2019-0383

In google/nomulus, versions nomulus-20190531-RC00 to nomulus-20191023-RC00, the function “expandRegistrarWithContacts” leaks password hash, and password salt into a file called “updateregistraremail.txt”. This disclosure might be leveraged by a malicious party...