—
GO-2023-2137
Credentials leak in github.com/ydb-platform/ydb-go-sdk/v3
Quick fix
GO-2023-2137 — github.com/ydb-platform/ydb-go-sdk/v3: upgrade to the fixed version with the command below.
go get github.com/ydb-platform/ydb-go-sdk/v3@v3.53.3Details
A custom credentials object that does not implement the fmt.Stringer interface may leak sensitive information (e.g., credentials) via logs.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/ydb-platform/ydb-go-sdk/v3
Introduced in:
3.48.6Fixed in: 3.53.3Fix
go get github.com/ydb-platform/ydb-go-sdk/v3@v3.53.3