An issue was discovered in Croc through 9.6.5. The shared secret, located on a command line, can be read by local users who list all processes and their arguments.
{ "versions": [ { "introduced": "0" }, { "last_affected": "9.6.5" } ] }
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-43621.json"