Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-3474
4.3
MEDIUMCVSS v3
Severity scale
010
Description
A bad credential handling in the remote assets API for Bazel versions prior to 5.3.2 and 4.2.3 sends all user-provided credentials instead of only the required ones for the requests. We recommend upgrading to versions later than or equal to 5.3.2 or 4.2.3.
bazelbuild/bazel
GitHuba fast, scalable, multi-language and extensible build system
GitHuba fast, scalable, multi-language and extensible build system>= 5.0.0, < 5.3.2, >= 3.1.0, < 4.2.3NVD