| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/hashicorp/vault | ≥ 1.3.0, < 1.3.6≥ 1.4.0, < 1.4.2 | 1.3.61.4.2 |
| vault | ≥ 1.4.0, < 1.4.2< 1.3.6 | 1.4.21.3.6 |
HashiCorp Vault and Vault Enterprise before 1.3.6, and 1.4.2 before 1.4.2, insert Sensitive Information into a Log File. The vulnerability is affecting github.com/hashicorp/vault/command Go package.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free