Skip to content
OpenAdvisories

Package · Go

github.com/etcd-io/etcd

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.1

    etcd key name can be accessed via LeaseTimeToLive API

    etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.26 and 3.5.9, the LeaseTimeToLive API allows access to key names (not value) associated to a lease when `Keys` parameter is true, even a user doesn't have read p…