From 189c9428108c5b4caca3a2dc0ae3f0ffa11007b6 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 11 Feb 2025 17:28:08 +0000 Subject: [PATCH] Publish GHSA-jw44-4f3j-q396 --- .../2024/03/GHSA-jw44-4f3j-q396/GHSA-jw44-4f3j-q396.json | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2024/03/GHSA-jw44-4f3j-q396/GHSA-jw44-4f3j-q396.json b/advisories/github-reviewed/2024/03/GHSA-jw44-4f3j-q396/GHSA-jw44-4f3j-q396.json index f4f16935971..0444bf5ebd2 100644 --- a/advisories/github-reviewed/2024/03/GHSA-jw44-4f3j-q396/GHSA-jw44-4f3j-q396.json +++ b/advisories/github-reviewed/2024/03/GHSA-jw44-4f3j-q396/GHSA-jw44-4f3j-q396.json @@ -1,14 +1,19 @@ { "schema_version": "1.4.0", "id": "GHSA-jw44-4f3j-q396", - "modified": "2024-03-15T19:06:55Z", + "modified": "2025-02-11T17:26:13Z", "published": "2024-03-03T21:31:25Z", "aliases": [ "CVE-2019-25210" ], "summary": "Helm shows secrets in clear text", "details": "An issue was discovered in Cloud Native Computing Foundation (CNCF) Helm. It displays values of secrets when the --dry-run flag is used. This is a security concern in some use cases, such as a --dry-run call by a CI/CD tool. NOTE: the vendor's position is that this behavior was introduced intentionally, and cannot be removed without breaking backwards compatibility (some users may be relying on these values).", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + ], "affected": [ { "package": {