CVE-2020-26226

CVE-2020-26226 affects the npm package semantic-release (pre-17.2.3). The vulnerability causes secrets that should be masked to be disclosed when they contain characters that become URI-encoded in a URL. The issue is resolved in version 17.2.3; upgrade to 17.2.3 or newer to mitigate. The CVSS met...