CVE-2023-25164

CVE-2023-25164 is a high-severity information disclosure vulnerability affecting Tinacms versions @tinacms/cli >= 1.0.0 and < 1.0.9. It causes sensitive environment variables to be written in plaintext to the index.js file, potentially exposing credentials like API keys. The vulnerability has a CVSS score of 7.5, indicating a high risk of compromise with no user interaction required. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.