-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/treeverse/lakefs | go | < 0.101.0 | 0.101.0 |
Miggo AIRoot Cause AnalysisThe log message provided in the vulnerability description shows sensitive S3 credentials being logged as part of error handling in the RunDiff function. The log line explicitly references 'func="pkg/plugins/diff.(*Service).RunDiff"' and 'file="build/pkg/plugins/diff/service.go:124"', indicating this function is responsible for constructing the log message that includes unsanitized credentials. The vulnerability stems from directly logging the S3Creds struct without redaction or filtering of sensitive fields.
A Semantic Attack on Google Gemini - Read the Latest Research