Bazel leaks user credentials through the remote assets API

...

Bazel 安全漏洞

Bazel is a fast, scalable, multi-language and extensible build system from Bazel Open Source. A security vulnerability exists in Bazel version 3.1.0 and later, which stems from faulty credential handling in the Remote Assets API that sends all user-supplied credentials instead of only the...