Npm · Aegir · CVE-2020-11059
**Name of the Vulnerable Software and Affected Versions**
AEgir versions 21.7.0 through 21.10.0
**Description**
The issue concerns the leakage of secrets from environment variables in the browser bundle published to npm when using `aegir publish` and `aegir build`. This has been fixed in version 21.10.1.
**Recommendations**
For AEgir versions 21.7.0 through 21.10.0, upgrade to version 21.10.1 or later to resolve the issue.
As a temporary workaround, consider running `printenv` to check environment variables and revoke any secrets.
Restrict access to sensitive environment variables to minimize the risk of exploitation.