Cloudevents vulnerabilities
We track 1 vulnerability in Cloudevents products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 6, 2024.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Cloudevents vulnerabilities
- 7.5 High severity
sdk-go: Insufficiently Protected Credentials
Go SDK for CloudEvents is the official CloudEvents SDK to integrate applications with CloudEvents. Prior to version 2.15.2, using cloudevents.WithRoundTripper to create a cloudevents.Client with an authenticated http.RoundTripper causes the go-sdk to leak cred