CVE-2017-16225

aegir is a module to help automate JavaScript project management. Version 12.0.0 through and including 12.0.7 bundled and published to npm the user (that performed a aegir-release) GitHub token.

Score

CVSS 3.0 7.5 High

Status

Modified - support@hackerone.com

Published

2018-06-07

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Aegir (Aegir Project)
• Aegir Node Module (Hackerone)

References

• https://nodesecurity.io/advisories/546