django-nopassword stores secrets in cleartext
High severity
GitHub Reviewed
Published
Jun 5, 2020
to the GitHub Advisory Database
•
Updated Sep 16, 2024
Description
Published by the National Vulnerability Database
Mar 18, 2020
Reviewed
Jun 4, 2020
Published to the GitHub Advisory Database
Jun 5, 2020
Last updated
Sep 16, 2024
django-nopassword before 5.0.0 stores cleartext secrets in the database.
References