CVE-2025-22246 CVE-2025-22246 – UAA Private Key Exposure

Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs...

GO-2024-2978 Private tokens could appear in logs if context containing gRPC metadata is logged in google.golang.org/grpc

If applications print or log a context containing gRPC metadata, the output will contain all the metadata, which may include private information. This represents a potential PII concern...

Information Disclosure

atlas-webapp is vulnerable to information disclosure. The library prints sensitive information in its stack trace error logs. A malicious user can then access sensitive information stored on these logs...