Semantic-release Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Semantic-release Project records in CISA KEV

No Semantic-release Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Semantic-release 2 records LOW

Records

2 records in Semantic-release · all components

TI-2020-16047 CVE-2020-26226 · GHSA-r2j6-p67h-q639

Secret disclosure in semantic-release

LOW 38

In the npm package semantic-release before version 17.2.3, secrets that would normally be masked by `semantic-release` can be accidentally disclosed if they contain characters that become encoded when included in a URL.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.01401 Published 2020-11-18 Fixed in 6.1.5, 17.2.3 CWE-116

TI-2022-13096 CVE-2022-31051 · GHSA-x2pg-mjhr-2m5x

Exposure of Sensitive Information to an Unauthorized Actor in semantic-release

LOW 36

semantic-release is an open source npm package for automated version management and package publishing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01798 Published 2022-06-09 Partial fix · 19.0.3 CWE-200

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0