| Package | Affected versions | Patched versions |
|---|---|---|
| vault-action | ≥ 0.1.0, < 2.2.0 | 2.2.0 |
HashiCorp vault-action (aka Vault GitHub Action) before 2.2.0 allows attackers to obtain sensitive information from log files because a multi-line secret was not correctly registered with GitHub Actions for log masking.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free