-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/fluxcd/source-controller | go | < 1.2.5 | 1.2.5 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from error messages containing full Azure storage URLs with SAS tokens in query parameters. The commit diff shows these functions were modified to add serror.SanitizeError() wrappers around returned errors. Prior to the patch, they directly returned errors containing raw URLs through fmt.Errorf() calls, which would log sensitive SAS tokens. The added sanitization in the patch confirms these were the leakage points.
GoGoOngoing coverage of React2Shell