GHSA-6vm3-jj99-7229
Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log lines
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/gin-gonic/gin | < 1.6.0 | 1.6.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
Gin is a HTTP web framework written in Go (Golang). Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines.
References
External links from the advisory. They lead to third-party sites.