Vulnerabilities > CVE-2020-26226 - Unspecified vulnerability in Semantic-Release Project Semantic-Release

047910
CVSS 8.1 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
semantic-release-project

Summary

In the npm package semantic-release before version 17.2.3, secrets that would normally be masked by `semantic-release` can be accidentally disclosed if they contain characters that become encoded when included in a URL. Secrets that do not contain characters that become encoded when included in a URL are already masked properly. The issue is fixed in version 17.2.3.

Vulnerable Configurations

Part Description Count
Application
Semantic-Release_Project
289