Cve Services
Approved changes feed: RSS · Atom
cpe:2.3:a:cve:cve-services:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Cve (96dd7d61-f934-515d-add1-2d92c0785ae3) |
|---|---|
| Product | Cve Services (4d18c0a9-6557-593c-81ff-38c35aee9a77) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/cveproject/cve-services |
purl2cpe | 2026-06-01 10:15:26.846994 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-24875 |
vulnerable | 2026-06-08 05:41:44.806088 |
Potential Secrets being logged to disk in CVEProject/cve-services
MEDIUM (5.3)
The CVEProject/cve-services is an open source project used to operate the CVE services api. In versions up to and including 1.1.1 the `org.conroller.js` code would erroneously log user secrets. This has been resolved in commit `46d98f2b` and should be available in subsequent versions of the software. Users of the software are advised to manually apply the `46d98f2b` commit or to update when a new version becomes available. As a workaround users should inspect their logs and remove logged secrets as appropriate.
Published: 2022-04-21T17:20:10.000Z
Updated: 2025-04-23T18:32:43.507Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.