Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:golang/google.golang.org/grpc@1.64.1
Typegolang
Namespacegoogle.golang.org
Namegrpc
Version1.64.1
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.79.3
Latest_non_vulnerable_version1.79.3
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-nncd-yw5m-m3b2
vulnerability_id VCID-nncd-yw5m-m3b2
summary 
Private tokens could appear in logs if context containing gRPC metadata is logged in github.com/grpc/grpc-go
### Impact
This issue represents a potential PII concern.  If applications were printing or logging a context containing gRPC metadata, the affected versions will contain all the metadata, which may include private information.

### Patches
The issue first appeared in 1.64.0 and is patched in 1.64.1 and 1.65.0

### Workarounds
If using an affected version and upgrading is not possible, ensuring you do not log or print contexts will avoid the problem.
references
0
reference_url https://github.com/grpc/grpc-go
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/grpc/grpc-go
1
reference_url https://github.com/grpc/grpc-go/commit/ab292411ddc0f3b7a7786754d1fe05264c3021eb
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/grpc/grpc-go/commit/ab292411ddc0f3b7a7786754d1fe05264c3021eb
2
reference_url https://github.com/grpc/grpc-go/security/advisories/GHSA-xr7q-jx4m-x55m
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/grpc/grpc-go/security/advisories/GHSA-xr7q-jx4m-x55m
fixed_packages
0
url pkg:golang/google.golang.org/grpc@1.64.1
purl pkg:golang/google.golang.org/grpc@1.64.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:golang/google.golang.org/grpc@1.64.1
aliases GHSA-xr7q-jx4m-x55m
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nncd-yw5m-m3b2
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:golang/google.golang.org/grpc@1.64.1