GHSA-5rc7-2jj6-mp64
Medium · 5.0CVSS
5.0
EPSS
—
Published
Feb 26, 2026
CISA due date
—
The record
Terraform Provider for Linode Debug Logs Vulnerable to Sensitive Information Exposure
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/linode/terraform-provider-linode | 0 | No fix |
| Go | github.com/linode/terraform-provider-linode/v2 | 0 | No fix |
| Go | github.com/linode/terraform-provider-linode/v3 | 0 | 3.9.0 |
Related vulnerabilities
- CVE-2026-27900 The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information… Same vulnerability
- CVE-2026-16648 Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log… CWE-532
- CVE-2026-104872 OpenTelemetry JavaScript Contrib provides instrumentation libraries for collecting… CWE-532
- CVE-2026-81870 OpenTelemetry-Go is the Go implementation of OpenTelemetry. CWE-532
- CVE-2026-87993 The consul-template library is vulnerable to an information disclosure issue in its error… CWE-532
- CVE-2026-80169 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-532
- CVE-2026-79966 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-532
- CVE-2026-86597 Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC… CWE-532