GO-2025-3900

See a problem?
Please try reporting it to the source first.

Source

https://pkg.go.dev/vuln/GO-2025-3900

Import Source

https://vuln.go.dev/ID/GO-2025-3900.json

JSON Data

https://api.osv.dev/v1/vulns/GO-2025-3900

Aliases

GHSA-2464-8j7c-4cjm

Published

2025-08-29T14:52:35Z

Modified

2025-08-29T15:42:25.041007Z

Summary

Go-viper's mapstructure May Leak Sensitive Information in Logs in github.com/go-viper/mapstructure

Details

Go-viper's mapstructure May Leak Sensitive Information in Logs in github.com/go-viper/mapstructure

Database specific

{
    "url": "https://pkg.go.dev/vuln/GO-2025-3900",
    "review_status": "REVIEWED"
}

References

Affected packages

Go / github.com/go-viper/mapstructure

Package

Name: github.com/go-viper/mapstructure; View open source insights on deps.dev
Purl: pkg:golang/github.com/go-viper/mapstructure

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Go / github.com/go-viper/mapstructure/v2

Package

Name: github.com/go-viper/mapstructure/v2; View open source insights on deps.dev
Purl: pkg:golang/github.com/go-viper/mapstructure/v2

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.0

Ecosystem specific

{
    "imports": [
        {
            "path": "github.com/go-viper/mapstructure/v2",
            "symbols": [
                "Decoder.decodeBool",
                "Decoder.decodeFloat",
                "Decoder.decodeInt",
                "Decoder.decodeUint",
                "StringToBoolHookFunc",
                "StringToComplex128HookFunc",
                "StringToComplex64HookFunc",
                "StringToFloat32HookFunc",
                "StringToFloat64HookFunc",
                "StringToIPHookFunc",
                "StringToIPNetHookFunc",
                "StringToInt16HookFunc",
                "StringToInt32HookFunc",
                "StringToInt64HookFunc",
                "StringToInt8HookFunc",
                "StringToIntHookFunc",
                "StringToNetIPAddrHookFunc",
                "StringToNetIPAddrPortHookFunc",
                "StringToNetIPPrefixHookFunc",
                "StringToTimeDurationHookFunc",
                "StringToTimeHookFunc",
                "StringToURLHookFunc",
                "StringToUint16HookFunc",
                "StringToUint32HookFunc",
                "StringToUint64HookFunc",
                "StringToUint8HookFunc",
                "StringToUintHookFunc"
            ]
        }
    ]
}