diff --git a/advisories/github-reviewed/2024/03/GHSA-jw44-4f3j-q396/GHSA-jw44-4f3j-q396.json b/advisories/github-reviewed/2024/03/GHSA-jw44-4f3j-q396/GHSA-jw44-4f3j-q396.json index f4f16935971..0444bf5ebd2 100644 --- a/advisories/github-reviewed/2024/03/GHSA-jw44-4f3j-q396/GHSA-jw44-4f3j-q396.json +++ b/advisories/github-reviewed/2024/03/GHSA-jw44-4f3j-q396/GHSA-jw44-4f3j-q396.json @@ -1,14 +1,19 @@ { "schema_version": "1.4.0", "id": "GHSA-jw44-4f3j-q396", - "modified": "2024-03-15T19:06:55Z", + "modified": "2025-02-11T17:26:13Z", "published": "2024-03-03T21:31:25Z", "aliases": [ "CVE-2019-25210" ], "summary": "Helm shows secrets in clear text", "details": "An issue was discovered in Cloud Native Computing Foundation (CNCF) Helm. It displays values of secrets when the --dry-run flag is used. This is a security concern in some use cases, such as a --dry-run call by a CI/CD tool. NOTE: the vendor's position is that this behavior was introduced intentionally, and cannot be removed without breaking backwards compatibility (some users may be relying on these values).", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + ], "affected": [ { "package": {