FazBrowse GitHub Viewer | Trending | | Home

Tools: [Download Repo ZIP] [Original HTTPS Page]

Overview · updatecli/updatecli · GitHub

Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

The Updatecli project only support the latest version.

Reporting a Vulnerability

Please disclose vulnerability via GitHub or via email at security@updatecli.io

file target does not confine writes to the working directory — path traversal / arbitrary file write via source-templated path
GHSA-hj4x-hm4v-7wpw published Aug 5, 2026 by olblak

High
Credential-bearing URLs (HTTP Basic Auth userinfo / git remotes) written to console and CI logs without redaction across the http resource and git SCM
GHSA-gc47-hwcc-8qp4 published Aug 5, 2026 by olblak

High
Maven credentials exposed in console output
GHSA-v34r-vj4r-38j6 published Jan 24, 2025 by olblak

High

Learn more about advisories related to updatecli/updatecli in the GitHub Advisory Database

Back | FazBrowse Home | New Git URL