HashiCorp Vault and Vault Enterprise logged proxy environment variables that potentially included sensitive credentials. Fixed in 1.3.6 and 1.4.2.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| github.com/hashicorp/vault(Go) | 1.3.0 | 1.3.6 | N/A |
| github.com/hashicorp/vault(Go) | 1.4.0 | 1.4.2 | N/A |
CVSS Metrics