{"id":"GO-2024-2978","summary":"Private tokens could appear in logs if context containing gRPC metadata is logged in google.golang.org/grpc","details":"If applications print or log a context containing gRPC metadata, the output will contain all the metadata, which may include private information. This represents a potential PII concern.","aliases":["GHSA-xr7q-jx4m-x55m"],"modified":"2026-02-04T04:40:42.328334Z","published":"2024-07-09T16:55:06Z","related":["CGA-jf77-7hm2-29wq"],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2024-2978","review_status":"REVIEWED"},"references":[{"type":"ADVISORY","url":"https://github.com/grpc/grpc-go/security/advisories/GHSA-xr7q-jx4m-x55m"},{"type":"FIX","url":"https://github.com/grpc/grpc-go/commit/ab292411ddc0f3b7a7786754d1fe05264c3021eb"}],"affected":[{"package":{"name":"google.golang.org/grpc","ecosystem":"Go","purl":"pkg:golang/google.golang.org/grpc"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.64.0"},{"fixed":"1.64.1"}]}],"ecosystem_specific":{"imports":[{"path":"google.golang.org/grpc/metadata","symbols":["MD.String"]}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2024-2978.json"}}],"schema_version":"1.7.3"}