Next.js Next-Forge BASEHUB_TOKEN Exposure Vulnerability

A vulnerability exists in the Next.js project boilerplate 'next-forge' due to the inclusion of a sensitive token, BASEHUB_TOKEN, in the file 'apps/web/.env.example'. This token should not be used and any access it may have granted should be revoked.

Impact

The exposure of the BASEHUB_TOKEN could lead to unauthorized access or actions within the BASEHUB platform, depending on the permissions associated with the token.

Remediation

Users should remove the BASEHUB_TOKEN from their environment files and revoke any access it may have granted. The vulnerability has been patched in version 3.0.11.