Security Advisory

CVE-2024-23840

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-01-30 16:39:09

Last updated 2025-05-29 15:04:48

Assigner GitHub_M

State PUBLISHED

Description

GoReleaser builds Go binaries for several platforms, creates a GitHub release and then pushes a Homebrew formula to a tap repository. `goreleaser release --debug` log shows secret values used in the in the custom publisher. This vulnerability is fixed in 1.24.0.

← Browse all CVEs View on cve.org ↗