Skip to content
OpenAdvisories

Package · npm

shakapacker

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    GHSA-96qw-h329-v5rg

    Shakapacker has environment variable leak via EnvironmentPlugin that exposes secrets to client-side bundles

    ### Summary Since 2017, the default webpack plugins have passed the entire `process.env` to `EnvironmentPlugin`. This pattern exposed ALL build environment variables to client-side JavaScript bundles whenever application code (or any dependency) referenced `p…

    shakapacker shakapacker npm RubyGems