Affected by GO-2023-2397 and 2 other vulnerabilities

GO-2023-2397: User with permission to write actions can impersonate another user when auth token is configured in environment variable in github.com/treeverse/lakefs

GO-2024-2581: User with ci:ReadAction permissions and write permissions to one path in a repository may copy objects from any path in the repository in github.com/treeverse/lakefs

GO-2024-3291: Re-creating a deleted user in lakeFS will re-enable previous user credentials that existed prior to its deletion in github.com/treeverse/lakefs

gcloud

package

v0.108.0 Latest Latest Go to latest Published: Aug 29, 2023 License: Apache-2.0, MIT Imports: 11 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/treeverse/lakefs

Links

Open Source Insights

Documentation ¶

Index ¶

Variables
func Open(l *lua.State, ctx context.Context)
type GSClient

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	ErrInvalidGCSURI = errors.New("invalid Google Cloud Storage URI")
)

Functions ¶

func Open ¶

func Open(l *lua.State, ctx context.Context)

Types ¶

type GSClient ¶

type GSClient struct {
	JSON string
	// contains filtered or unexported fields
}

Source Files ¶

View all Source files

gcs.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL