Github.Com Cloudevents Sdk-Go V2 vulnerabilities

1 known vulnerability affecting github.com/cloudevents_sdk-go_v2.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2024-28110HIGH≥ 0, < 2.15.22024-03-06

CVE-2024-28110 [HIGH] CWE-522 Go SDK for CloudEvents's use of WithRoundTripper to create a Client leaks credentials Go SDK for CloudEvents's use of WithRoundTripper to create a Client leaks credentials ### Impact _What kind of vulnerability is it? Who is impacted?_ Using cloudevents.WithRoundTripper to create a cloudevents.Client with an authenticated http.RoundTripper causes the go-sdk to leak credentials to arbitrary endpoints. The relevant code is [here](https://github.com/cloudevents/sdk-g