This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2019-25766 | BDVDB-2026-362148 Detail

renovatebotrenovate

Description#

Renovate versions >= 13.87.0 and <= 19.38.6 leak temporary repository tokens into pull request comments during certain Go Modules update failure scenarios. The issue is fixed in version 19.38.7. Anyone able to view the affected pull request comments could obtain the exposed tokens.

Impact#

Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-532 Insertion of Sensitive Information into Log File

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.