Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Information leak in nodejs-firestore
Vulnerability Description
A potential logging of the firestore key via logging within nodejs-firestore exists - Developers who were logging objects through this._settings would be logging the firestore key as well potentially exposing it to anyone with logs read access. We recommend upgrading to version 6.1.0 to avoid this issue
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N
Vulnerability Type
敏感信息的不安全存储
Vulnerability Title
nodejs-firestore 安全漏洞
Vulnerability Description
Google nodejs-firestore是美国谷歌（Google）公司的一个NoSQL文档数据库。 nodejs-firestore 6.1.0之前版本存在安全漏洞，该漏洞源于存在潜在日志记录，可能会暴露给具有日志读取访问权限的任何人。
CVSS Information
N/A
Vulnerability Type
N/A