https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 04:48:35 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-37053 cnvd-2021-37053 https://cve.radiocsirt.org/vuln/cnvd-2021-37053 https://cve.radiocsirt.org/vuln/euvd-2026-27837 EUVD-2026-27837 https://cve.radiocsirt.org/vuln/euvd-2026-27837 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32074 <p>HashiCorp vault-action (aka Vault GitHub Action) before 2.2.0 allows attackers to obtain sensitive information from log files because a multi-line secret was not correctly registered with GitHub Actions for log masking.</p> <p>HashiCorp vault-action (aka Vault GitHub Action) before 2.2.0 allows attackers to obtain sensitive information from log files because a multi-line secret was not correctly registered with GitHub Actions for log masking.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-32074 https://cve.radiocsirt.org/vuln/ghsa-4mgv-m5cm-f9h7 <p><strong>Affected:</strong> GitHub Actions: hashicorp/vault-action</p> <p>HashiCorp vault-action (aka Vault GitHub Action) before 2.2.0 allows attackers to obtain sensitive information from log files because a multi-line secret was not correctly registered with GitHub Actions for log masking.</p> <p>The vault-action implementation did not correctly handle the marking of multi-line variables. As a result, multi-line secrets were not correctly masked in vault-action output.</p> <p>Remediation: Customers using vault-action should evaluate the risk associated with this issue, and consider upgrading to vault-action 2.2.0 or newer. Please refer to https://github.com/marketplace/actions/hashicorp-vault for more information.</p> <p><strong>Affected:</strong> GitHub Actions: hashicorp/vault-action</p> <p>HashiCorp vault-action (aka Vault GitHub Action) before 2.2.0 allows attackers to obtain sensitive information from log files because a multi-line secret was not correctly registered with GitHub Actions for log masking.</p> <p>The vault-action implementation did not correctly handle the marking of multi-line variables. As a result, multi-line secrets were not correctly masked in vault-action output.</p> <p>Remediation: Customers using vault-action should evaluate the risk associated with this issue, and consider upgrading to vault-action 2.2.0 or newer. Please refer to https://github.com/marketplace/actions/hashicorp-vault for more information.</p> https://cve.radiocsirt.org/vuln/ghsa-4mgv-m5cm-f9h7 https://cve.radiocsirt.org/vuln/gsd-2021-32074 gsd-2021-32074 https://cve.radiocsirt.org/vuln/gsd-2021-32074