Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/02/10 12:25 a.m.12 views

unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)

The sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via JSON.stringify without sanitization, exposing secrets to shell history, CI/CD logs, and log...

5.9CVSS5.6AI score0.00132EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder