—
GO-2024-3265
Git credentials are exposed in Atlantis logs in github.com/runatlantis/atlantis
Details
Git credentials are exposed in Atlantis logs in github.com/runatlantis/atlantis
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/runatlantis/atlantis
Introduced in:
0 Fixed in: 0.30.0 Fix
go get github.com/runatlantis/atlantis@v0.30.0 References
- https://github.com/runatlantis/atlantis/security/advisories/GHSA-gppm-hq3p-h4rp [ADVISORY]
- https://github.com/runatlantis/atlantis/commit/0def7d3fb74aabb75570554692b053950cde02e1 [FIX]
- https://github.com/runatlantis/atlantis/pull/4667 [FIX]
- https://github.com/runatlantis/atlantis/issues/4060 [REPORT]
- https://argo-cd.readthedocs.io/en/stable/operator-manual/security [WEB]
- https://github.com/runatlantis/atlantis/releases/tag/v0.30.0 [WEB]