Closed
Description
The version of used github.com/hashicorp/go-retryablehttp
module has known vuln: GO-2024-2947
$ govulncheck ./...
=== Symbol Results ===
Vulnerability #1: GO-2024-2947
Leak of sensitive information to log files in
github.com/hashicorp/go-retryablehttp
More info: https://pkg.go.dev/vuln/GO-2024-2947
Module: github.com/hashicorp/go-retryablehttp
Found in: github.com/hashicorp/[email protected]
Fixed in: github.com/hashicorp/[email protected]
Example traces found:
#1: connection.go:458:23: databricks.conn.handleStagingPut calls http.Client.Do, which eventually calls retryablehttp.RoundTripper.RoundTrip
Your code is affected by 1 vulnerability from 1 module.
This scan also found 2 vulnerabilities in packages you import and 2
vulnerabilities in modules you require, but your code doesn't appear to call
these vulnerabilities.
Use '-show verbose' for more details.
Please, update your go.mod
Ofc, the manual update in my go.mod
is a valid option.
Metadata
Metadata
Assignees
Labels
No labels