mirror of
https://github.com/kemko/nomad.git
synced 2026-01-01 16:05:42 +03:00
OIDC client secrets that users provide in auth method configuration are, well, secret, so we should hide them from API calls and event streams.
4 lines
177 B
Plaintext
4 lines
177 B
Plaintext
```release-note:security
|
|
auth: Redact OIDC client secret from API responses and event stream ([CVE-2025-1296](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1296))
|
|
```
|