AIKIDO-2024-10292
github.com/sirupsen/logrus is vulnerable to Denial of Service (DoS)
55
Medium Risk
This Affects:
github.com/sirupsen/logrusTL;DR
Affected versions of the package are vulnerable to Denial of Service (DoS). When more than 64KB of data is logged in a single entry without newlines, the log writer function may hang indefinitely, preventing the system from processing further log entries and potentially causing a denial of service.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
github.com/sirupsen/logrus is vulnerable to Denial of Service (DoS) in versions 1.8.3 - 1.9.2.
How to fix this
Upgrade the github.com/sirupsen/logrus library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant