Cloudevents Sdk-Go vulnerabilities

1 known vulnerability affecting cloudevents/sdk-go.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2024-28110HIGHCVSS 7.5fixed in 2.15.22024-03-06

CVE-2024-28110 [HIGH] CWE-522 CVE-2024-28110: Go SDK for CloudEvents is the official CloudEvents SDK to integrate applications with CloudEvents. P Go SDK for CloudEvents is the official CloudEvents SDK to integrate applications with CloudEvents. Prior to version 2.15.2, using cloudevents.WithRoundTripper to create a cloudevents.Client with an authenticated http.RoundTripper causes the go-sdk to leak credentials to arbitrary endpoints. When the transport is populated with an authenticated transpo