4 matches found
google_gax
googlegax（已修补） 这是 googlegax v0.4.1 的修补版 fork，用于兼容 Tesla = 1.18.3。 为什么存在这个 fork Tesla 1.18.3（2026年6月2日）引入了对 multipart 字段名称的严格验证，通过 assertquotedstringsafe!/2 作为 CVE-2026-48598 安全修复的一部分。上游的 googlegax（最后发布：2021年，已停止维护）将原子（:metadata、:data）作为 multipart 字段名称传递，现在 Tesla 会抛出 FunctionClauseError 拒绝这些名称。...
CVE-2026-77950
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to receive unredacted internal error data by provoking an error shape the configured error handler does not match. applyerrorhandler/3 in...
CVE-2026-77950 RPC error handler fails open in AshTypescript, disclosing unredacted errors
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to receive unredacted internal error data by provoking an error shape the configured error handler does not match. applyerrorhandler/3 in...
EUVD-2026-68925
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to receive unredacted internal error data by provoking an error shape the configured error handler does not match. applyerrorhandler/3 in...