https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T10:24:03.632370+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-31168 cnvd-2020-31168 2026-10-05T10:24:03.713804+00:00 cnvd-2020-31168 https://cve.radiocsirt.org/vuln/euvd-2026-40290 EUVD-2026-40290 2026-10-05T10:24:03.713851+00:00 EUVD-2026-40290 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11059 fkie_cve-2020-11059 2026-10-05T10:24:03.713872+00:00

In AEgir greater than or equal to 21.7.0 and less than 21.10.1, aegir publish and aegir build may leak secrets from environment variables in the browser bundle published to npm. This has been fixed in 21.10.1.

 https://cve.radiocsirt.org/vuln/ghsa-qfcv-5whw-7pcw GHSA-qfcv-5whw-7pcw — Exposure of Sensitive Information to an Unauthorized Actor in AEgir 2026-10-05T10:24:03.713914+00:00

Affected: npm: aegir

### Impact `aegir publish` and `aegir build` may leak secrets from environmental variables in the browser bundle published to npm.

### Patches The code has been patched, users should upgrade to >= 21.10.1

### Workarounds Run `printenv` to check your environment variables and revoke any secrets.

### For more information If you have any questions or comments about this advisory: * Open an issue in [aegir](https://github.com/ipfs/aegir)

 https://cve.radiocsirt.org/vuln/gsd-2020-11059 gsd-2020-11059 2026-10-05T10:24:03.713977+00:00 gsd-2020-11059