Open-Irs · Open-Irs · CVE-2024-24757
**Name of the Vulnerable Software and Affected Versions**
open-irs versions prior to 1.0.1
**Description**
The issue concerns an accidentally uploaded `.env` file when working with git actions, which contains sensitive information. This problem has been fixed in version 1.0.1. The solution involves discontinuing all sensitive keys and turning them into secrets.
**Recommendations**
For versions prior to 1.0.1, update to version 1.0.1 to resolve the issue. As a temporary workaround, consider restricting access to the sensitive keys in the `.env` file until the update is applied.