Common Weakness Enumeration

CWE-540 Inclusion of Sensitive Information in Source Code

Description

Source code on a web server or repository often contains sensitive information and should generally not be accessible to users.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-540 ordered by modification date.

2 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-fwqx-8365-9983 CVE-2026-45728 HIGH
golang/github.com/xyproto/algernon

Algernon: Single-file mode unconditionally enables debug mode

 2026-05-19
GHSA-88m4-h43f-wx84 CVE-2025-23215 CRITICAL
maven/net.sourceforge.pmd/pmd-core maven/net.sourceforge.pmd/pmd-designer maven/net.sourceforge.pmd/pmd-ui

PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext

 2025-04-04