github.com/huandu/facebook may expose access_token in error message.

Summary accesstoken can be exposed in error message on fail in HTTP request. Details Using this module, when HTTP request fails, error message can contain accesstoken. This can be happen when: - module is sending HTTP request with query parameter ?accesstoken=.... - and HTTP request fails errors...

PT-2024-26397

Name of the Vulnerable Software and Affected Versions github.com/huandu/facebook versions prior to 2.7.2 Description The issue concerns the exposure of access token in error messages when HTTP requests fail. This can occur when the module sends HTTP requests with a query parameter ?access token=...

CVE-2024-35232: Generation of Error Message Containing Sensitive Information

github.com/huandu/facebook is a Go package that fully supports the Facebook Graph API with file upload, batch request and marketing API. accesstoken can be exposed in error message on fail in HTTP request. This issue has been patched in version 2.7.2...