| Package | Affected versions | Patched versions |
|---|---|---|
| aegir | ≥ 21.7.0, < 21.10.1 | 21.10.1 |
| aegir | ≥ 21.7.0, < 21.10.1 | 21.10.1 |
aegir publish and aegir build may leak secrets from environmental variables in the browser bundle published to npm.
The code has been patched, users should upgrade to >= 21.10.1
Run printenv to check your environment variables and revoke any secrets.
If you have any questions or comments about this advisory:
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free