goreleaser
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| goreleaser | 1 | – | Jan 30, 2024 |
| nfpm | 1 | – | May 30, 2023 |
Exploited and recent CVEs
- CVE-2024-23840 `goreleaser release --debug` shows secrets 0.3%
- CVE-2023-32698 nfpm vulnerable to Incorrect Default Permissions 0.4%