Skip to content
OpenAdvisories

Package · Go

github.com/filecoin-project/curio

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-gj6x-q8rh-wj6x

    Curio exposes database credentials to users with network access through verbose HTTP error responses

    ## Summary Multiple HTTP handlers in Curio passed raw database error messages to HTTP clients via `http.Error()`. When the PostgreSQL/YugabyteDB driver (pgx) returned errors, these could contain the database connection string — including hostname, port, usern…

    github.com/filecoin-project/curio Go