github.com/getaxonflow/axonflow-sdk-go/v2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 5.9

GHSA-mhc4-qq83-fmrr

axonflow-sdk-go: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification

## Summary The AxonFlow SDK's `WebhookSubscription` (or equivalent) type did not expose the HMAC-SHA256 signing key returned by the platform's `CreateWebhook` endpoint. Without access to the secret through the typed SDK API, callers had no path to verify the …

github.com/getaxonflow/axonflow-sdk-go github.com/getaxonflow/axonflow-sdk-go/v3 github.com/getaxonflow/axonflow-sdk-go/v5 github.com/getaxonflow/axonflow-sdk-go/v2 Go

May 6, 2026