Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/06 9:39 p.m.16 views

Flight vulnerable to sensitive information disclosure via default error handler

Summary The default error handler Engine::error writes the full exception message, exception code, and stack trace including absolute filesystem paths directly into the HTTP 500 response, with no debug gating. Production deployments leak internal paths, any secret interpolated into an exception...

7.5CVSS5.8AI score0.00335EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder