Skip to content
OpenAdvisories

Package · npm

semantic-release

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2020-26226

    Secret disclosure in semantic-release

    In the npm package semantic-release before version 17.2.3, secrets that would normally be masked by `semantic-release` can be accidentally disclosed if they contain characters that become encoded when included in a URL. Secrets that do not contain characters …

    semantic-release semantic-release semantic-release npm