Private tokens could appear in logs if context containing gRPC metadata is logged in google.golang.org/grpc

GO-2024-2978 · GHSA-xr7q-jx4m-x55m

Published Jul 9, 2024 · Modified Feb 4, 2026

Description

If applications print or log a context containing gRPC metadata, the output will contain all the metadata, which may include private information. This represents a potential PII concern.

References

ADVISORY https://github.com/grpc/grpc-go/security/advisories/GHSA-xr7q-jx4m-x55m
FIX https://github.com/grpc/grpc-go/commit/ab292411ddc0f3b7a7786754d1fe05264c3021eb

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes