high7.5
CVE-2020-7654
Information Exposure in Snyk Broker
Impact
All versions of snyk-broker before 4.73.1 are vulnerable to Information Exposure. It logs private keys if logging level is set to DEBUG.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | snyk-broker | < 4.73.1 | 4.73.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synk | Broker | before 4.73.1 |