GHSA-wj7f-468m-6mv8: Environment variables still accessible through /proc

December 1, 2023

Environment variables can be read from procfs unless a new process is started.

References

github.com/advisories/GHSA-wj7f-468m-6mv8
github.com/phylum-dev/birdcage
github.com/phylum-dev/birdcage/security/advisories/GHSA-wj7f-468m-6mv8

Detect and mitigate GHSA-wj7f-468m-6mv8 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →