{"action":"Upgrade snyk to 1.1297.3 or later.","affected":[{"fixed":"1.1297.3","introduced":"0"}],"component":"snyk","cve_ids":["CVE-2025-6624"],"ecosystem":"npm","epss":0.00179,"exploited":false,"fixed_versions":["1.1297.3"],"ghsa_id":"GHSA-6hwc-9h8r-3vmf","id":"tcs_01M5KF09JX2HK6REZFH1SPXAYC","modified_at":"2025-07-28T20:42:06.359926Z","published_at":"2025-06-26T06:31:04Z","references":["https://osv.dev/vulnerability/GHSA-6hwc-9h8r-3vmf","https://nvd.nist.gov/vuln/detail/CVE-2025-6624","https://github.com/snyk/cli/commit/38322f377da7e5f1391e1f641710be50989fa4df","https://github.com/snyk/go-application-framework/commit/ca7ba7d72e68455afb466a7a47bb2c9aece86c18","https://docs.snyk.io/snyk-cli/debugging-the-snyk-cli","https://github.com/snyk","https://github.com/snyk/cli/releases/tag/v1.1297.3","https://security.snyk.io/vuln/SNYK-JS-SNYK-10497607"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-6hwc-9h8r-3vmf","url":"https://osv.dev/vulnerability/GHSA-6hwc-9h8r-3vmf"}],"summary":"Snyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode"}