Skip to content
OpenAdvisories

Package · Debian

ruby-puppet-resource-api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.7
    CVE-2026-8804

    Cleartext Storage of Sensitive Information for Puppet Resource API

    Puppet resource_api (shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x) does not preserve the sensitive flag on parameters defined via the resource-api, causing values such as passwords to be stored in cleartext in the agent's local transac…

    Perforce Puppet Enterprise Puppet Core ruby-puppet-resource-api Debian Ubuntu