—
GO-2023-2397
User with permission to write actions can impersonate another user when auth token is configured in environment variable in github.com/treeverse/lakefs
Quick fix
GO-2023-2397 — github.com/treeverse/lakefs: upgrade to the fixed version with the command below.
go get github.com/treeverse/lakefs@v1.3.1Details
User with permission to write actions can impersonate another user when auth token is configured in environment variable in github.com/treeverse/lakefs
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/treeverse/lakefs
Introduced in:
0Fixed in: 1.3.1Fix
go get github.com/treeverse/lakefs@v1.3.1