npm/@cyclonedx/cdxgen: medium
@cyclonedx/cdxgen: Docker registry auth substring match forwards credentials to a different registry
Action: Upgrade @cyclonedx/cdxgen to 12.3.3 or later.
npm i @cyclonedx/cdxgen@12.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.9.5 | 12.3.3 | - |
Fixed versions
| 12.3.3 |
Sources
- osv: GHSA-qhh4-458h-xwh2
- https://github.com/cdxgen/cdxgen/security/advisories/GHSA-qhh4-458h-xwh2
- https://github.com/cdxgen/cdxgen
published · modified · JSON