https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T09:59:34.418044+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2020-15095 CVE-2020-15095 — Sensitive information exposure through logs in npm cli 2026-09-29T09:59:34.421732+00:00

Affected: npm cli

Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs like "<protocol>://[<user>[:<password>]@]<hostname>[:<port>][:][/]<path>". The password value is not redacted and is printed to stdout and also to any generated log files.

 https://vulnerability.circl.lu/vuln/ghsa-93f3-23rq-pjfp GHSA-93f3-23rq-pjfp — npm CLI exposing sensitive information through logs 2026-09-29T09:59:34.421843+00:00

Affected: npm: npm

Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs like `<protocol>://[<user>[:<password>]@]<hostname>[:<port>][:][/]<path>`. The password value is not redacted and is printed to stdout and also to any generated log files.