Vulnerabilities > Semantic Release Project

DATE CVE VULNERABILITY TITLE RISK
2022-06-09 CVE-2022-31051 Information Exposure vulnerability in Semantic-Release Project Semantic-Release
semantic-release is an open source npm package for automated version management and package publishing.
network
low complexity
semantic-release-project CWE-200
7.5
2020-11-18 CVE-2020-26226 Improper Encoding or Escaping of Output vulnerability in Semantic-Release Project Semantic-Release
In the npm package semantic-release before version 17.2.3, secrets that would normally be masked by `semantic-release` can be accidentally disclosed if they contain characters that become encoded when included in a URL.
network
low complexity
semantic-release-project CWE-116
8.1