CVE-2024-28110
2 advisories.
Go/github.com/cloudevents/sdk-go/v2 CVE-2024-28110: high 7.5, EPSS 0.66%
Go SDK for CloudEvents's use of WithRoundTripper to create a Client leaks credentials
Action: Upgrade github.com/cloudevents/sdk-go/v2 to 2.15.2 or later.
go get github.com/cloudevents/sdk-go/v2@v2.15.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.15.2 | - |
Fixed versions
| 2.15.2 |
Sources
- osv: GHSA-5pf6-2qwx-pxm2
- https://github.com/cloudevents/sdk-go/security/advisories/GHSA-5pf6-2qwx-pxm2
- https://github.com/cloudevents/sdk-go/commit/de2f28370b0d2a0f64f92c0c6139fa4b8a7c3851
- https://github.com/cloudevents/sdk-go
- https://github.com/cloudevents/sdk-go/blob/67e389964131d55d65cd14b4eb32d57a47312695/v2/protocol/http/protocol.go#L104-L110
CVE-2024-28110 · published · modified · JSON
Go/github.com/cloudevents/sdk-go/v2 CVE-2024-28110: unknown, EPSS 0.66%
Authentication token leak in github.com/cloudevents/sdk-go/v2
Action: Upgrade github.com/cloudevents/sdk-go/v2 to 2.15.2 or later.
go get github.com/cloudevents/sdk-go/v2@v2.15.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.15.2 | - |
Fixed versions
| 2.15.2 |
Sources
- osv: GO-2024-2618
- https://github.com/cloudevents/sdk-go/security/advisories/GHSA-5pf6-2qwx-pxm2
- https://github.com/cloudevents/sdk-go/commit/de2f28370b0d2a0f64f92c0c6139fa4b8a7c3851
- https://github.com/cloudevents/sdk-go/blob/67e389964131d55d65cd14b4eb32d57a47312695/v2/protocol/http/protocol.go#L104-L110
CVE-2024-28110 · published · modified · JSON