HF RL Explorer

Security Bug: Environment Variable Values Leaked into Generated Prisma Client Files During prisma migrate dev

Security Bug: Environment Variable Values Leaked into Generated Prisma Client Files During prisma migrate dev: a task in LegoFlow-SWE (Harbor dataset). When running prisma migrate dev , the values of environment variables referenced via env(...) in the Prisma schema file are being written in…

The task

When running `prisma migrate dev`, the values of environment variables referenced via `env(...)` in the Prisma schema file are being written in plaintext into the generated Prisma client files (`edge.js`, `index.js`, and potentially others). This is a security vulnerability introduced in Prisma version 6.6.0.

Part of Lego-X/LegoFlow-SWE.