~ / search / GHSA-mgh5-4h95-qj4p

GHSA-mgh5-4h95-qj4p

Information Exposure in Snyk Broker

Source: GitHub Advisory Database (reviewed) High CVE-2020-7654

Packages

EcosystemPackageAffectedFixed in
npm snyk-broker < 4.73.1 4.73.1

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of snyk-broker before 4.73.1 are vulnerable to Information Exposure. It logs private keys if logging level is set to DEBUG.

References

External links from the advisory. They lead to third-party sites.