1. OpenBao Secrets Operator Exposes Sensitive HTTP Credentials in Logs via GO-2024-2947
A reachable vulnerability in the OpenBao Secrets Operator's main branch is leaking sensitive HTTP basic authentication credentials directly into log files. The flaw, tracked as GO-2024-2947, stems from a failure to sanitize URLs before they are written to logs within the underlying `github.com/hashicorp/go-retryablehtt...