VDB
Sign up
—

GO-2022-0706

Information disclosure in go.elastic.co/apm

Quick fix

GO-2022-0706 — go.elastic.co/apm: upgrade to the fixed version with the command below.

go get go.elastic.co/apm@v1.11.0

Details

Sensitive HTTP headers may not be properly sanitized before being sent to the APM server if the program panics.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/go.elastic.co/apm
Introduced in: 0Fixed in: 1.11.0
Fixgo get go.elastic.co/apm@v1.11.0

References