title: Apache ShenYu Password leakage
description: On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later.
problem types: CWE-522 Insufficiently Protected Credentials
affected:
{
product: Apache ShenYu (incubating)
vendor: Apache Software Foundation
versions:
lessThan: 2.4.2, status: affected, version: Apache ShenYu (incubating) , versionType: custom
}