—
GO-2022-0980
Exposure of Vault secrets via error messages in github.com/hashicorp/consul-template
Quick fix
GO-2022-0980 — github.com/hashicorp/consul-template: upgrade to the fixed version with the command below.
go get github.com/hashicorp/consul-template@v0.27.3Details
The text of errors returned by Template.Execute can contain Vault secrets, potentially revealing these secrets in logs or error reports.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/hashicorp/consul-template
Introduced in:
0Fixed in: 0.27.3Fix
go get github.com/hashicorp/consul-template@v0.27.3