Google LLC Bazel vulnerabilities

1 vulnerability

Known vulnerabilities in Google LLC Bazel, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.1CVE-2022-3474google llcbazel+1
EPSS score
0.34%
A bad credential handling in the remote assets API for Bazel versions prior to 5.3.2 and 4.2.3 sends all user-provided credentials instead of only the required ones for the requests. We recommend upgrading to versions later than or equal to 5.3.2 or 4.2.3.