Unknown · Nodejs-Firestore · CVE-2023-6460
**Name of the Vulnerable Software and Affected Versions**
nodejs-firestore versions prior to 6.1.0
**Description**
A potential logging issue exists within nodejs-firestore, where developers logging objects through `this. settings` may inadvertently log the firestore key, potentially exposing it to anyone with logs read access.
**Recommendations**
For versions prior to 6.1.0, upgrade to version 6.1.0 to avoid this issue. As a temporary workaround, consider avoiding the logging of objects through `this. settings` to minimize the risk of exposing the firestore key.