changelogs/fragments/dont-template-cli-passwords.yml


1
2
3
4
5
6

bugfixes:
- >
  **security issue** - Convert CLI provided passwords to text initially, to
  prevent unsafe context being lost when converting from bytes->text during
  post processing of PlayContext. This prevents CLI provided passwords from
  being incorrectly templated (CVE-2019-14856)