-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from the 'run' function in build.go where environment variables were added to the logger context. The commit diff shows removal of 'log.WithField("env", env)' and adjustment of the logging call to exclude environment data. This directly correlates with the described vulnerability where environment variables (potentially containing secrets) were logged at INFO level when build output was non-empty.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/goreleaser/goreleaser | go | = 1.26.0 | 1.26.1 |