GHSA-4g6q-77j7-vvjc
Suggest an improvement- Source
- https://github.com/advisories/GHSA-4g6q-77j7-vvjc
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/12/GHSA-4g6q-77j7-vvjc/GHSA-4g6q-77j7-vvjc.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-4g6q-77j7-vvjc
- Aliases
- Published
- 2023-12-04T15:31:55Z
- Modified
- 2023-12-04T23:28:51.761068Z
- Severity
-
- 4.0 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- Logging of the firestore key within nodejs-firestore
- Details
-
A potential logging of the firestore key via logging within nodejs-firestore exists - Developers who were logging objects through this._settings would be logging the firestore key as well potentially exposing it to anyone with logs read access. We recommend upgrading to version 6.1.0 to avoid this issue
- Database specific
{ "github_reviewed": true, "github_reviewed_at": "2023-12-04T23:13:52Z", "nvd_published_at": "2023-12-04T13:15:07Z", "cwe_ids": [ "CWE-532", "CWE-922" ], "severity": "MODERATE" }- References
Affected packages
npm / @google-cloud/firestore
Package
- Name
- @google-cloud/firestore
- View open source insights on deps.dev
- Purl
- pkg:npm/%40google-cloud/firestore