Go/google.golang.org/grpc: low

Private tokens could appear in logs if context containing gRPC metadata is logged in github.com/grpc/grpc-go

Action: Upgrade google.golang.org/grpc to 1.64.1 or later.

go get google.golang.org/grpc@v1.64.1

Affected

Fixed versions

Sources

• osv: GHSA-xr7q-jx4m-x55m
• https://github.com/grpc/grpc-go/security/advisories/GHSA-xr7q-jx4m-x55m
• https://github.com/grpc/grpc-go/commit/ab292411ddc0f3b7a7786754d1fe05264c3021eb
• https://github.com/grpc/grpc-go

published 2024-07-05T20:07:01Z · modified 2026-09-10T03:50:17.144982671Z · JSON