vulnerability in wush project
Open
- Dominant language
- Go
- Stars
- 1.5k
- Forks
- 47
- PR merge metrics
- No merged PRs in 30d
Description
While working on wush project, I discovered a vulnerability [(CVE-2025-66411](https://vulert.com/vuln-db/CVE-2025-66411)) in the github.com/coder/coder/v2 package. The issue occurs because the Workspace Agent logs sensitive environment variables in plaintext without sanitization. Updating to the patched version and disabling agent logs temporarily mitigates the risk.
[CVE Link](https://vulert.com/vuln-db/CVE-2025-66411)
[CVE Report](https://vulert.com/vuln-scan/list/94b7bf9a-0e23-45fd-ad15-7ed0b9992cd5?sort_order=desc&sort_by=created_at)
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.