Credential Exposure Affecting openssl-encrypt package, versions [,1.4.0)

openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files

Affected versions of this package are vulnerable to Credential Exposure via the --password and --keystore-password CLI arguments, which are visible in the process list to any user on the system. An attacker can obtain sensitive credentials by inspecting running processes or accessing process command-line arguments.

• GitHub Advisory
• GitHub Commit