~ / search / GHSA-2xwv-3cc9-fp7c

GHSA-2xwv-3cc9-fp7c

Sensitive Data Exposure in seneca

Source: GitHub Advisory Database (reviewed) Low CVE-2019-5483

Packages

EcosystemPackageAffectedFixed in
npm seneca < 3.9.0 3.9.0

Details

As written in the advisory (Markdown source, shown as plain text).

Versions of `seneca` prior to 3.9.0 are vulnerable to Sensitive Data Exposure. When a process using the package crashes all environment variables are printed. This may leak sensitive data such as access keys, especially given scenarios when log-monitoring systems store the error output. ## Recommendation Upgrade to version 3.9.0 or later.

References

External links from the advisory. They lead to third-party sites.