Description (CNA)
next-forge is a Next.js project boilerplate for modern web application. The BASEHUB_TOKEN commited in apps/web/.env.example. Users should avoid use of this token and should remove any access it may have in their systems.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| haydenbleasel / next-forge | affected < 3.0.11 |
CWE
CWE-312
References
- https://github.com/haydenbleasel/next-forge/security/advisories/GHSA-wppx-qmqh-9h33
- https://github.com/haydenbleasel/next-forge/commit/239a98f2c308a51d626ae0613102917f82603c1c
ADP enrichment
No English description supplied.
No references supplied.