Description
A potential logging of the firestore key via logging within nodejs-firestore exists - Developers who were logging objects through this._settings would be logging the firestore key as well potentially exposing it to anyone with logs read access. We recommend upgrading to version 6.1.0 to avoid this issue
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| nodejs-firestore | < 6.1.0 | 6.1.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @google-cloud/firestore | < 6.1.0 | 6.1.0 | GHSA-4g6q-77j7-vvjc |