GO-2023-1914 Brute-force of token secrets in github.com/superfly/tokenizer

Brute-force of token secrets in github.com/superfly/tokenizer...

Brute Force Token Secrets

superfly/tokenizer is vulnerable to brute-force of token secrets vulnerability. The vulnerability is due to not restricting formatting in fmt parameter to simple formatting and allowing fmt/dst parameters to be specified at request time leading to attacker brute forcing secret values using...