-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from inadequate scrubbing of sensitive data in nested structures. The pre-patch version of ScrubSensitiveData only performed shallow scrubbing, missing fields in nested objects. The commit 1d6f852 added recursive handling for pointers, structs, and interfaces, and the test changes demonstrate that nested fields with 'sensitive' tags were previously not scrubbed. This function is directly responsible for data redaction in JSON outputs, making it the clear vulnerable component.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/kopia/kopia | go | < 0.16.0 | 0.16.0 |
GoGoOngoing coverage of React2Shell