OPENSUSE-SU-2025:14956-1 headscale-0.25.1-2.1 on GA media

These are all security issues fixed in the headscale-0.25.1-2.1 package on the GA media of openSUSE Tumbleweed...

Headscale writes bearer tokens to info-level logs

Headscale through 0.22.3 writes bearer tokens to info-level logs...

GHSA-WP76-CF2J-RQQ7 Headscale writes bearer tokens to info-level logs

Headscale through 0.22.3 writes bearer tokens to info-level logs...

CVE-2023-47390

Headscale through 0.22.3 writes bearer tokens to info-level logs...

CVE-2023-47390

Headscale through 0.22.3 writes bearer tokens to info-level logs...

Design/Logic Flaw

Headscale through 0.22.3 writes bearer tokens to info-level logs...

CVE-2023-47390

Headscale through 0.22.3 writes bearer tokens to info-level logs...

CVE-2023-47390

Headscale up to 0.22.3 stores bearer tokens in info‑level logs via the HTTP API, exposing credentials in logs. Multiple connected sources corroborate that tokens are written to logs when accessing the API, with the root cause described as logging sensitive data. Affected: Headscale; component: HT...

PT-2023-30439 · Headscale · Headscale

Name of the Vulnerable Software and Affected Versions: Headscale versions through 0.22.3 Description: The issue allows Headscale to write bearer tokens to info-level logs. Recommendations: For versions through 0.22.3, consider restricting log access to minimize the risk of exploitation. At the...

CVE-2023-47390

Headscale through 0.22.3 writes bearer tokens to info-level logs...

CVE-2023-47390

Headscale through 0.22.3 writes bearer tokens to info-level logs...

Headscale Security Breach

Headscale is an application from the Dutch individual developer Juan Font that provides self-hosts and hobbyists with open source servers that can be used for their projects and labs. A security vulnerability exists in Headscale 0.22.3 and earlier versions, which stems from a token being entered...