16 matches found
GHSA-XX6G-43W2-9G6G OliveTin's email argument makes compliance harder, enables log injection
Summary The typeSafetyCheckEmail function in service/internal/executor/arguments.go calls log.Errorf on every invocation including when validation succeeds err == nil. This means every email address submitted by any user is written to the application's ERROR-level log unconditionally. Because the...
6.9CVSS6AI score
SaveExploits0References4
20