VYPR
← All advisories
Medium severity6.0NVD Advisory· Published Jun 24, 2024· Updated Jun 17, 2026

CVE-2024-6104

CVE-2024-6104

Description

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
github.com/hashicorp/go-retryablehttpGo
< 0.7.70.7.7

Affected products

801

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.