Vulnerability Report: GO-2022-0706
- CVE-2021-22133, GHSA-qqc5-rgcc-cjqh
- Affects: go.elastic.co/apm
- Published: May 18, 2021
- Modified: Jun 12, 2023
Sensitive HTTP headers may not be properly sanitized before being sent to the APM server if the program panics.
Affected Packages
-
PathVersionsSymbols
-
before v1.11.0
Aliases
References
- https://github.com/elastic/apm-agent-go/pull/888
- https://github.com/elastic/apm-agent-go/commit/dd3e8c593580e7b80a98b57e1cc6e017e56747b4
- https://vuln.go.dev/ID/GO-2022-0706.json
Feedback
See anything missing or incorrect?
Suggest an edit to this report.