5 matches found
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to the newGRPCDialOptions not applying the loaded TLS configuration from environment variables when creating gRPC transport credentials. An attacker can intercept or spoof the collector connection usi...
6.5CVSS5.8AI score0.00328EPSS
SaveExploits0References2
20