New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade mod go-retryablehttp 0.7.7 for CVE-2024-6104 #150

Open

snigle opened this issue Jan 29, 2025 · 0 comments

snigle commented Jan 29, 2025

CVE-2024-6104	5.5 (v3)	go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment