Richardoc vulnerabilities
2 vulnerabilities
Known vulnerabilities in Richardoc products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Github Workflow Updater Extension1 vulnerabilities
- Kube Audit Rest1 vulnerabilities
RoutineCVE-2025-62794richardoc · github-workflow-updater-extensionGitHub Workflow Updater stored the optional Github token in plaintextGitHub Workflow Updater is a VS Code extension that automatically pins GitHub Actions to specific commits for enhanced security. Before 0.0.7, any provided Github token would be stored in plaintext in the editor configuration as json on disk, rather than through the more secure "securestorage" api. An attacker with read only access to your home directory could have read this token and used it to perform actions with that token. Update to 0.0.7.CVSS3.8LowEPSS0.13%RoutineCVE-2025-24884richardoc · kube-audit-rest +1 morekube-audit-rest's example logging configuration could disclose secret values in the audit logkube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. This vulnerability is fixed in 1.0.16.CVSS5.1MediumEPSS0.19%