Skip to content
OpenAdvisories

Package · GitHub Actions

hashicorp/vault-action

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2021-32074

    Vault GitHub Action did not correctly mask multi-line secrets in output

    HashiCorp vault-action (aka Vault GitHub Action) before 2.2.0 allows attackers to obtain sensitive information from log files because a multi-line secret was not correctly registered with GitHub Actions for log masking.

    hashicorp/vault-action GitHub Actions