Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Hugomrdias

#26729of 53,622
9.6Total CVSS
Vulnerabilities · 1
PT-2020-12520
9.6
2020-05-27
Npm · Aegir · CVE-2020-11059
**Name of the Vulnerable Software and Affected Versions** AEgir versions 21.7.0 through 21.10.0 **Description** The issue concerns the leakage of secrets from environment variables in the browser bundle published to npm when using `aegir publish` and `aegir build`. This has been fixed in version 21.10.1. **Recommendations** For AEgir versions 21.7.0 through 21.10.0, upgrade to version 21.10.1 or later to resolve the issue. As a temporary workaround, consider running `printenv` to check environment variables and revoke any secrets. Restrict access to sensitive environment variables to minimize the risk of exploitation.