| Package | Affected versions | Patched versions |
|---|---|---|
| semantic-release | < 17.2.3 | 17.2.3 |
| semantic-release | < 17.2.3 | 17.2.3 |
Secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that become encoded when included in a URL.
Fixed in v17.2.3
Secrets that do not contain characters that become encoded when included in a URL are already masked properly.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free