Lucene search
+L

2 matches found

Veracode
Veracode
added 2025/08/13 10:50 a.m.5 views

Sensitive Data Exposure

@finos/git-proxy is vulnerable to sensitive data exposure. The vulnerability is due to improper validation of commits in the pack sent to GitHub, which allows an attacker to inject unreferenced commits containing sensitive data and retrieve them via direct commit URLs without appearing in the...

7.1CVSS6.8AI score0.00341EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder