PT-2022-22308 · Google · Bazel

Name of the Vulnerable Software and Affected Versions: Bazel versions prior to 5.3.2 Bazel versions prior to 4.2.3 Description: A bad credential handling in the remote assets API sends all user-provided credentials instead of only the required ones for the requests. Recommendations: For Bazel...