Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
CVE-2022-0079: Showdoc can reveal private data in error messages
CVE-2022-0079 · published 4 years ago
Summary
The Showdoc documentation tool may include sensitive information in the messages it shows when something goes wrong. This could expose internal details to anyone who sees the error page. Update to the latest version or apply the provided patch to stop the software from leaking this data.
What to do
- Update showdoc showdoc to version 2.10.0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| composer | showdoc | showdoc |
< 2.10.0 Fix: upgrade to 2.10.0
|
Original advisory text
Generation of Error Message Containing Sensitive Information in star7th/showdoc
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information
References
- https://github.com/advisories/GHSA-5mj6-3cmq-fh34
- https://huntr.dev/bounties/b37f0e26-355a-4d50-8495-a567c10828ee URL
- https://nvd.nist.gov/vuln/detail/CVE-2022-0079 Vendor Advisory
- https://github.com/star7th/showdoc/commit/e43df0a190f68aefa272507d3bd54475f566c1... Patch
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0079.j... Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-209Generation of Error Message Containing Sensitive Information
Timeline
Published3 Jan 2022
Updated4 Nov 2026
First seen6 Mar 2026
Track software like this
Free during beta