mc-monitor icon indicating copy to clipboard operation
mc-monitor copied to clipboard

Private tokens could appear in logs if context containing gRPC metadata is logged

Open strausmann opened this issue 5 months ago • 5 comments

I get this CVE reported by the Docker Scout for itzg/mc-monitor. Unfortunately,I can't find the place in the code to submit a PR.

LOW: https://github.com/advisories/GHSA-xr7q-jx4m-x55m

image

https://github.com/grpc/grpc-go/commit/ab292411ddc0f3b7a7786754d1fe05264c3021eb

Can we fix that?

strausmann avatar Sep 10 '24 18:09 strausmann