AIKIDO-2024-10279
zapier-platform-schema is vulnerable to Exposure of Sensitive Information
24
Low Risk
This Affects:
zapier-platform-schemaTL;DR
Affected versions of the package may expose sensitive information. When invoking methods such as authentication.oauth1Config.getAccessToken or authentication.oauth2Config.refreshAccessToken, some logger servers return querystring-formatted data that contains sensitive information, such as secrets, which could be exposed and accessed by unauthorized parties.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
zapier-platform-schema is vulnerable to Exposure of Sensitive Information in versions 8.3.0 - 15.14.1.
How to fix this
Upgrade the zapier-platform-schema library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.