Skip to content
OpenAdvisories

Vendor

goreleaser

2 known vulnerabilities.

Products

nfpm 1 goreleaser 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2024-23840

    `goreleaser release --debug` shows secrets

    GoReleaser builds Go binaries for several platforms, creates a GitHub release and then pushes a Homebrew formula to a tap repository. `goreleaser release --debug` log shows secret values used in the in the custom publisher. This vulnerability is fixed in 1.24…

    goreleaser goreleaser goreleaser github.com/goreleaser/goreleaser Wolfi Go