Common Weakness Enumeration

CWE-215 Insertion of Sensitive Information Into Debugging Code

Description

The product inserts sensitive information into debugging code, which could expose this information if the debugging code is not disabled in production.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-215 ordered by modification date.

7 reviewed records

Advisory ID	NVD ID	Severity	PURLs	Summary	Last Modified
GHSA-xvp7-8vm8-xfxx	-	MODERATE	npm/@actual-app/sync-server	Actual Sync-server Gocardless service is logging sensitive data including bearer tokens and account numbers	2026-06-08
GHSA-95mq-xwj4-r47p	CVE-2026-40173	CRITICAL	golang/github.com/dgraph-io/dgraph golang/github.com/dgraph-io/dgraph/v24 golang/github.com/dgraph-io/dgraph/v25	Dgraph: Unauthenticated /debug/pprof/cmdline discloses admin auth token, enabling unauthorized access to protected Alpha admin endpoints	2026-04-16
GHSA-x6g4-f6q3-fqvv	CVE-2026-33247	HIGH	golang/github.com/nats-io/nats-server/v2	NATS credentials are exposed in monitoring port via command-line argv	2026-03-27
GHSA-vqf5-2xx6-9wfm	CVE-2025-24362	HIGH	-	GitHub PAT written to debug artifacts	2025-03-31
GHSA-rgrf-6mf5-m882	CVE-2024-22194	LOW	pypi/case-utils pypi/cdo-local-uuid	cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code	2024-09-13
GHSA-p3x5-5xpx-9phm	CVE-2018-1002104	MODERATE	golang/k8s.io/ingress-nginx	Kubernetes ingress exposes sensitive information	2023-10-05
GHSA-mjvc-j6rv-9xj8	CVE-2022-0721	HIGH	-	Insertion of Sensitive Information Into Debugging Code in Microweber	2022-02-24