Description
Seneca < 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users.
Remediation
References
https://hackerone.com/reports/526258
Related Vulnerabilities
CVE-2019-17495 Vulnerability in maven package org.webjars.npm:swagger-ui
CVE-2021-32828 Vulnerability in maven package org.nuxeo.ecm.platform:nuxeo-platform-oauth
CVE-2022-25646 Vulnerability in npm package x-data-spreadsheet
CVE-2020-28280 Vulnerability in npm package predefine
CVE-2021-3597 Vulnerability in maven package io.undertow:undertow-core