CVE-2026-25918
1 advisory.
npm/@rage-against-the-pixel/unity-cli CVE-2026-25918: medium
unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)
Action: Upgrade @rage-against-the-pixel/unity-cli to 1.8.2 or later.
npm i @rage-against-the-pixel/unity-cli@1.8.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.2 | - |
Fixed versions
| 1.8.2 |
Sources
- osv: GHSA-4255-c27h-62m5
- https://github.com/RageAgainstThePixel/unity-cli/security/advisories/GHSA-4255-c27h-62m5
- https://nvd.nist.gov/vuln/detail/CVE-2026-25918
- https://github.com/RageAgainstThePixel/unity-cli/commit/8d4d67b23d7c5fd8f00df3f0f10bec2961c95342
- https://github.com/RageAgainstThePixel/unity-cli
- https://github.com/RageAgainstThePixel/unity-cli/releases/tag/v1.8.2
CVE-2026-25918 · published · modified · JSON