VDB
GO-2024-2618
GO-2024-2618
PUBLISHED
Authentication token leak in github.com/cloudevents/sdk-go/v2
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | cloudevents/sdk-go/v2 | 0, 0 |
Timeline
- Mar 11, 2024 CVE Published
- Feb 4, 2026 CVE Updated
References
- https://github.com/cloudevents/sdk-go/security/advisories/GHSA-5pf6-2qwx-pxm2 advisory
- https://github.com/cloudevents/sdk-go/commit/de2f28370b0d2a0f64f92c0c6139fa4b8a7c3851 patch
- https://github.com/cloudevents/sdk-go/blob/67e389964131d55d65cd14b4eb32d57a47312695/v2/protocol/http/protocol.go#L104-L110 url