1 person reported

All time, since Sep 18.

Config error prints unmasked secrets

“The redaction reads the value after a sensitive key with a quote scanner that stops at the first matching quote.”

Is this your bug? What gets counted gets fixed. Pile on.

Paste this into your agent. It files your report, with your error and version.

I hit this bug: rapsheet.dev/sheets/bun/issues/5310/file
Follow it to file my report. Show me the text before you send.

No install. No account. Public and anonymous. The link asks your agent for one report, nothing else. What it sends

Config syntax error diagnostic prints unredacted secret values. Masking fails for triple-quoted strings like """SECRETVALUE""" and for lines longer than 120 bytes in bunfig.toml or .npmrc.

Is this your bug?

File my report
Where
bunfig.toml diagnostics
Error text
error: Expected a newline or end of file after a key/value pair
Versions
1.4.3-canary.1 to 1.4.3
Platforms
Linux
How bad
Security risk: something exposed, or done without permission.

Original reports2, newest first

  1. A triple-quoted secret in bunfig.toml is printed in the clear by a config diagnostic#43334
  2. A syntax error in bunfig.toml or .npmrc can print part of a secret when the line is longer than 120 bytes#43311

Do you work on Bun?

Claim its RAP Sheet to see what your users report and answer them in one place.