Semantic-release vulnerabilities
We track 1 vulnerability in Semantic-release products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 9, 2022.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Semantic-release vulnerabilities
- 7.5 High severity
semantic-release: Exposure of Sensitive Information to an Unauthorized Actor
semantic-release is an open source npm package for automated version management and package publishing. In affected versions secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that are excluded fr