https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T04:38:50.199754+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-37053 cnvd-2021-37053 2026-10-17T04:38:50.202943+00:00 cnvd-2021-37053 https://cve.radiocsirt.org/vuln/euvd-2026-27837 EUVD-2026-27837 2026-10-17T04:38:50.202976+00:00 EUVD-2026-27837 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32074 fkie_cve-2021-32074 2026-10-17T04:38:50.202990+00:00

HashiCorp vault-action (aka Vault GitHub Action) before 2.2.0 allows attackers to obtain sensitive information from log files because a multi-line secret was not correctly registered with GitHub Actions for log masking.

 https://cve.radiocsirt.org/vuln/ghsa-4mgv-m5cm-f9h7 GHSA-4mgv-m5cm-f9h7 — Vault GitHub Action did not correctly mask multi-line secrets in output 2026-10-17T04:38:50.203017+00:00

Affected: GitHub Actions: hashicorp/vault-action

HashiCorp vault-action (aka Vault GitHub Action) before 2.2.0 allows attackers to obtain sensitive information from log files because a multi-line secret was not correctly registered with GitHub Actions for log masking.

The vault-action implementation did not correctly handle the marking of multi-line variables. As a result, multi-line secrets were not correctly masked in vault-action output.

Remediation: Customers using vault-action should evaluate the risk associated with this issue, and consider upgrading to vault-action 2.2.0 or newer. Please refer to https://github.com/marketplace/actions/hashicorp-vault for more information.

 https://cve.radiocsirt.org/vuln/gsd-2021-32074 gsd-2021-32074 2026-10-17T04:38:50.203043+00:00 gsd-2021-32074