| Package | Affected versions | Patched versions |
|---|---|---|
| google.golang.org/grpc | ≥ 1.64.0, < 1.64.1 | 1.64.1 |
This issue represents a potential PII concern. If applications were printing or logging a context containing gRPC metadata, the affected versions will contain all the metadata, which may include private information.
The issue first appeared in 1.64.0 and is patched in 1.64.1 and 1.65.0
If using an affected version and upgrading is not possible, ensuring you do not log or print contexts will avoid the problem.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free