What is GHSA-2xwv-3cc9-fp7c?

GHSA-2xwv-3cc9-fp7c is a security advisory published by GitHub Security Advisories with Low severity. Sensitive Data Exposure in seneca

Which CVE IDs does GHSA-2xwv-3cc9-fp7c cover?

GHSA-2xwv-3cc9-fp7c covers the following CVE IDs: CVE-2019-5483. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-2xwv-3cc9-fp7c?

GHSA-2xwv-3cc9-fp7c affects 1 product, including: npm/seneca:\u003c 3.9.0.

GHSA-2xwv-3cc9-fp7cLow

Sensitive Data Exposure in seneca

Vendor

GitHub Security Advisories

Published

September 11, 2019

Last Modified

January 9, 2023

🔗 CVE IDs covered (1)

CVE-2019-5483 →

📋 Description

Versions of seneca prior to 3.9.0 are vulnerable to Sensitive Data Exposure. When a process using the package crashes all environment variables are printed. This may leak sensitive data such as access keys, especially given scenarios when log-monitoring systems store the error output.

Recommendation

Upgrade to version 3.9.0 or later.

🎯 Affected products1

npm/seneca:< 3.9.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2019-5483
https://hackerone.com/reports/526258
https://github.com/nodejs/security-wg/blob/master/vuln/npm/501.json
https://www.npmjs.com/advisories/1155
https://github.com/advisories/GHSA-2xwv-3cc9-fp7c