CVE-2020-26226
1 advisory.
npm/semantic-release CVE-2020-26226: high 8.1
Secret disclosure when containing characters that become URI encoded
Action: Upgrade semantic-release to 17.2.3 or later.
npm i semantic-release@17.2.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 17.2.3 | - |
Fixed versions
| 17.2.3 |
Sources
- osv: GHSA-r2j6-p67h-q639
- https://github.com/semantic-release/semantic-release/security/advisories/GHSA-r2j6-p67h-q639
- https://nvd.nist.gov/vuln/detail/CVE-2020-26226
- https://github.com/semantic-release/semantic-release/commit/ca90b34c4a9333438cc4d69faeb43362bb991e5a
CVE-2020-26226 · published · modified · JSON