CVE-2021-31153

Name of the Vulnerable Software and Affected Versions please versions prior to 0.4

Description The issue is related to the search path function and the --check option, -d of the please utility, which can lead to information disclosure in error messages. An attacker can exploit this to gain knowledge about the existence of files or directories in privileged locations.

Recommendations For versions prior to 0.4, consider disabling the search path function, the --check option, or the -d option as a temporary workaround until a patch is available. Restrict access to privileged locations to minimize the risk of exploitation.