{"action":"Upgrade google.golang.org/grpc to 1.64.1 or later.","affected":[{"fixed":"1.64.1","introduced":"1.64.0"}],"component":"google.golang.org/grpc","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["1.64.1"],"ghsa_id":"GHSA-xr7q-jx4m-x55m","id":"tcs_01M5KG47SEKT1NSTBBHR4J025Z","modified_at":"2026-02-04T04:40:42.328334Z","published_at":"2024-07-09T16:55:06Z","references":["https://osv.dev/vulnerability/GO-2024-2978","https://github.com/grpc/grpc-go/security/advisories/GHSA-xr7q-jx4m-x55m","https://github.com/grpc/grpc-go/commit/ab292411ddc0f3b7a7786754d1fe05264c3021eb"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2978","url":"https://osv.dev/vulnerability/GO-2024-2978"}],"summary":"Private tokens could appear in logs if context containing gRPC metadata is logged in google.golang.org/grpc"}