Skip to content
OpenAdvisories

Package · Go

github.com/basekick-labs/arc

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    GHSA-m3qr-fvp4-78xj

    Arc has unauthenticated application log disclosure via `/api/v1/logs`

    ## Summary Arc exposes `GET /api/v1/logs` without authentication even when authentication is enabled by default. The route is registered before the global Fiber authentication middleware, and the handler returns recent buffered application logs without perfor…

    github.com/basekick-labs/arc Go