CVE-2020-11059

Name of the Vulnerable Software and Affected Versions AEgir versions 21.7.0 through 21.10.0

Description The issue concerns the leakage of secrets from environment variables in the browser bundle published to npm when using aegir publish and aegir build. This has been fixed in version 21.10.1.

Recommendations For AEgir versions 21.7.0 through 21.10.0, upgrade to version 21.10.1 or later to resolve the issue. As a temporary workaround, consider running printenv to check environment variables and revoke any secrets. Restrict access to sensitive environment variables to minimize the risk of exploitation.