https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 09:59:34 +0000 https://vulnerability.circl.lu/vuln/cve-2020-15095 <p><strong>Affected:</strong> npm cli</p> <p>Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs like &#34;&lt;protocol&gt;://[&lt;user&gt;[:&lt;password&gt;]@]&lt;hostname&gt;[:&lt;port&gt;][:][/]&lt;path&gt;&#34;. The password value is not redacted and is printed to stdout and also to any generated log files.</p> <p><strong>Affected:</strong> npm cli</p> <p>Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs like &#34;&lt;protocol&gt;://[&lt;user&gt;[:&lt;password&gt;]@]&lt;hostname&gt;[:&lt;port&gt;][:][/]&lt;path&gt;&#34;. The password value is not redacted and is printed to stdout and also to any generated log files.</p> https://vulnerability.circl.lu/vuln/cve-2020-15095 https://vulnerability.circl.lu/vuln/ghsa-93f3-23rq-pjfp <p><strong>Affected:</strong> npm: npm</p> <p>Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs like `&lt;protocol&gt;://[&lt;user&gt;[:&lt;password&gt;]@]&lt;hostname&gt;[:&lt;port&gt;][:][/]&lt;path&gt;`. The password value is not redacted and is printed to stdout and also to any generated log files.</p> <p><strong>Affected:</strong> npm: npm</p> <p>Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs like `&lt;protocol&gt;://[&lt;user&gt;[:&lt;password&gt;]@]&lt;hostname&gt;[:&lt;port&gt;][:][/]&lt;path&gt;`. The password value is not redacted and is printed to stdout and also to any generated log files.</p> https://vulnerability.circl.lu/vuln/ghsa-93f3-23rq-pjfp