module: k8s.io/client-go
package: k8s.io/client-go/transport
additional_packages:
  - module: k8s.io/kubernetes
    package: k8s.io/kubernetes/staging/src/k8s.io/client-go/transport
    symbols:
      - debuggingRoundTripper.RoundTrip
    versions:
      - fixed: v1.16.0-beta.1
versions:
  - fixed: v0.17.0
description: |
  Authorization tokens may be inappropriately logged if the verbosity
  level is set to a debug level.
published: 2021-04-14T12:00:00Z
cve: CVE-2019-11250
symbols:
  - debuggingRoundTripper.RoundTrip
links:
  pr: https://github.com/kubernetes/kubernetes/pull/81330
  commit: https://github.com/kubernetes/kubernetes/commit/4441f1d9c3e94d9a3d93b4f184a591cab02a5245
  context:
    - https://github.com/kubernetes/kubernetes/issues/81114