HIGH7.5
GHSA-6vm3-jj99-7229
Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log lines
Quick fix
GHSA-6vm3-jj99-7229 — github.com/gin-gonic/gin: upgrade to the fixed version with the command below.
go get github.com/gin-gonic/gin@v1.6.0Details
Gin is a HTTP web framework written in Go (Golang). Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines.
Are you affected?
Enter the version of the package you're using.