Skip to content
OpenAdvisories
Low CVE-2019-5483 EUVD-2019-0648GHSA-2xwv-3cc9-fp7c

Sensitive Data Exposure in seneca

Published Sep 9, 2019 · Updated Aug 4, 2024 · Assigned by hackerone

Description

Seneca < 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users.

Affected products

VendorProductAffectedFixed
— seneca Fixed versions >= 3.9.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm seneca < 3.9.0 3.9.0 GHSA-2xwv-3cc9-fp7c

References