https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 16:29:15 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-11050 cnvd-2018-11050 https://cve.radiocsirt.org/vuln/cnvd-2018-11050 https://cve.radiocsirt.org/vuln/euvd-2026-166675 EUVD-2026-166675 https://cve.radiocsirt.org/vuln/euvd-2026-166675 https://cve.radiocsirt.org/vuln/fkie_cve-2016-10530 <p>The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. Environment variables can often times contain secret keys and other sensitive values. A malicious user could be on the same network as a regular user and intercept all the secret keys the user is sending. This goes against common best practice, which is to use HTTPS.</p> <p>The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. Environment variables can often times contain secret keys and other sensitive values. A malicious user could be on the same network as a regular user and intercept all the secret keys the user is sending. This goes against common best practice, which is to use HTTPS.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-10530 https://cve.radiocsirt.org/vuln/ghsa-856x-cp3q-47vg <p><strong>Affected:</strong> npm: airbrake</p> <p>Affected versions of `airbrake` default to sending environment variables over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible for them to capture and read these environment variables, which may result in leaking sensitive information.</p> <p>## Recommendation</p> <p>Update to version 0.4.0 or later, or upgrade from the now-deprecated `airbrake` module to its replacement, [`airbrake-js`](https://www.npmjs.com/package/airbrake-js).</p> <p><strong>Affected:</strong> npm: airbrake</p> <p>Affected versions of `airbrake` default to sending environment variables over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible for them to capture and read these environment variables, which may result in leaking sensitive information.</p> <p>## Recommendation</p> <p>Update to version 0.4.0 or later, or upgrade from the now-deprecated `airbrake` module to its replacement, [`airbrake-js`](https://www.npmjs.com/package/airbrake-js).</p> https://cve.radiocsirt.org/vuln/ghsa-856x-cp3q-47vg https://cve.radiocsirt.org/vuln/gsd-2016-10530 gsd-2016-10530 https://cve.radiocsirt.org/vuln/gsd-2016-10530