CVE-2021-32074

score

<0.1

cvss

7.5

epss

1.9%

published

2021-05-07

kev added

—

first seen

2026-10-21

HashiCorp vault-action before 2.2.0 contains a sensitive information disclosure caused by improper log masking of multi-line secrets in GitHub Actions, letting attackers obtain secrets from logs, exploit requires attacker to control secret input.