AIKIDO-2025-10410

github.com/datadog/dd-trace-go/contrib/database/sql/v2 is vulnerable to Generation of Error Message Containing Sensitive Information

Generation of Error Message Containing Sensitive Information Pre-CVE Published Jun 25, 2025

Low Risk

This Affects:

github.com/datadog/dd-trace-go/contrib/database/sql/v2

2.0.0 - 2.0.0

Fixed in 2.0.1

Are you affected? Scan for Free

TL;DR

This patch improves error handling in the database/sql contrib package by sanitizing sensitive information in database connection strings before logging or including it in error messages. It ensures that credentials and other confidential details are not exposed in logs or error outputs, aligning with security best practices for protecting connection data.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

github.com/datadog/dd-trace-go/contrib/database/sql/v2 is vulnerable to Generation of Error Message Containing Sensitive Information in versions 2.0.0 - 2.0.0.