PT-2019-20070 · Renovate · Renovate

Publicado 2019-10-21 · Atualizado 2019-10-21

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Renovate versions prior to 19.38.7

Description Temporary repository tokens were leaked into Pull Requests comments during certain Go Modules update failure scenarios.

Recommendations For versions prior to 19.38.7, upgrade to version 19.38.7 or later. As a temporary workaround, consider disabling Go Modules support until the issue is resolved.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

GHSA-V7X3-7HW7-PCJG

Produtos afetados

Renovate

Referências · 5

• https://github.com/renovatebot/renovate · Nota
• https://github.com/renovatebot/renovate/security/advisories/GHSA-v7x3-7hw7-pcjg · Nota
• https://snyk.io/vuln/SNYK-JS-RENOVATE-536203 · Nota
• https://github.com/advisories/GHSA-v7x3-7hw7-pcjg · Nota
• https://osv.dev/vulnerability/GHSA-v7x3-7hw7-pcjg · Aviso do Fabricante