Hashicorp Retryablehttp vulnerabilities

1 vulnerability

Known vulnerabilities in Hashicorp Retryablehttp, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6CVE-2024-6104chainguardaactl+296
EPSS score
0.36%
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7.