Description

Use of Hard-coded Credentials in GitHub repository nuxtlabs/github-module prior to 1.6.2.

Remediation

References

https://github.com/nuxtlabs/github-module/commit/5490c43f729eee60f07920bf88c0aabdc1398b6e

https://huntr.dev/bounties/65096ef9-eafc-49da-b49a-5b88c0203ca6

Related Vulnerabilities

CVE-2020-13410 Vulnerability in npm package aedes

CVE-2021-21122 Vulnerability in npm package electron

CVE-2022-39243 Vulnerability in maven package com.zaxxer:nuprocess

CVE-2022-24760 Vulnerability in npm package parse-server

CVE-2022-2596 Vulnerability in npm package node-fetch

Severity

Critical

Classification

CWE-798 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Patch Permissions Required Third Party Advisory