Approved changes feed: RSS · Atom

cpe:2.3:a:easybuild_project:easybuild:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEasybuild Project (664d41b1-87f3-5560-9b43-0c5d412854a6)
ProductEasybuild (477bd389-e751-5127-93b8-f08d40582e54)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/easybuilders/easybuild-framework purl2cpe 2026-06-01 10:13:06.199997

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-5262 vulnerable 2026-06-08 05:26:41.641669 GitHub personal access token leaking into temporary EasyBuild (debug) logs
HIGH (7.7)
In EasyBuild before version 4.1.2, the GitHub Personal Access Token (PAT) used by EasyBuild for the GitHub integration features (like `--new-pr`, `--fro,-pr`, etc.) is shown in plain text in EasyBuild debug log files. This issue is fixed in EasyBuild v4.1.2, and in the `master`+ `develop` branches of the `easybuild-framework` repository.
Published: 2020-03-19T17:05:16.000Z
Updated: 2024-08-04T08:22:09.105Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.