- Notifications
You must be signed in to change notification settings - Fork 51
Closed
Description
The version of used github.com/hashicorp/go-retryablehttp module has known vuln: GO-2024-2947
$ govulncheck ./... === Symbol Results === Vulnerability #1: GO-2024-2947 Leak of sensitive information to log files in github.com/hashicorp/go-retryablehttp More info: https://pkg.go.dev/vuln/GO-2024-2947 Module: github.com/hashicorp/go-retryablehttp Found in: github.com/hashicorp/go-retryablehttp@v0.7.1 Fixed in: github.com/hashicorp/go-retryablehttp@v0.7.7 Example traces found: #1: connection.go:458:23: databricks.conn.handleStagingPut calls http.Client.Do, which eventually calls retryablehttp.RoundTripper.RoundTrip Your code is affected by 1 vulnerability from 1 module. This scan also found 2 vulnerabilities in packages you import and 2 vulnerabilities in modules you require, but your code doesn't appear to call these vulnerabilities. Use '-show verbose' for more details. Please, update your go.mod
Ofc, the manual update in my go.mod is a valid option.
Metadata
Metadata
Assignees
Labels
No labels