Lucene search
+L

3 matches found

PyPA
PyPA
•added 2026/07/07 2:34 p.m.•44 views

ops leaking secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command

SummaryThe issue here is that we pass the secret content as one of the args via CLI. This issue may affect any of our charms that are using: Juju =3.0, Juju secrets and not correctly capturing and processing subprocess.CalledProcessError.There are two points that may log this command, in differen...

6.9CVSS6.1AI score0.00198EPSS
SaveExploits0References6Affected Software1
osv-pysec
osv-pysec
•added 2026/07/07 2:34 p.m.•26 views

PYSEC-2026-1753 ops leaking secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command

Summary The issue here is that we pass the secret content as one of the args via CLI. This issue may affect any of our charms that are using: Juju =3.0, Juju secrets and not correctly capturing and processing subprocess.CalledProcessError. There are two points that may log this command, in...

6.9CVSS6.1AI score0.00198EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•26 views

EUVD-2024-2360

Malicious code in bioql PyPI...

4.4CVSS5.4AI score0.00198EPSS
SaveExploits0References4
Rows per page
Query Builder