Releases497
Frequency1 week 1 day
Last Release
Stars25.6K
a fast, scalable, multi-language and extensible build system

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
>= 5.0.0, < 5.3.2, >= 3.1.0, < 4.2.34.3 MEDIUM

A bad credential handling in the remote assets API for Bazel versions prior to 5.3.2 and 4.2.3 sends all user-provided credentials instead of only the required ones for the requests. We recommend upgrading to versions later than or equal to 5.3.2 or 4.2.3.