{"schema_version":"1.3.1","id":"GO-2024-2978","modified":"2024-07-09T16:55:06Z","published":"2024-07-09T16:55:06Z","aliases":["GHSA-xr7q-jx4m-x55m"],"summary":"Private tokens could appear in logs if context containing gRPC metadata is logged in google.golang.org/grpc","details":"If applications print or log a context containing gRPC metadata, the output will contain all the metadata, which may include private information. This represents a potential PII concern.","affected":[{"package":{"name":"google.golang.org/grpc","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.64.0"},{"fixed":"1.64.1"}]}],"ecosystem_specific":{"imports":[{"path":"google.golang.org/grpc/metadata","symbols":["MD.String"]}]}}],"references":[{"type":"ADVISORY","url":"https://github.com/grpc/grpc-go/security/advisories/GHSA-xr7q-jx4m-x55m"},{"type":"FIX","url":"https://github.com/grpc/grpc-go/commit/ab292411ddc0f3b7a7786754d1fe05264c3021eb"}],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2024-2978","review_status":"REVIEWED"}}