module = "k8s.io/client-go"
package = "k8s.io/client-go/transport"

description = """
Authorization tokens may be inappropriately logged if the verbosity
level is set to a debug level.
"""

cve = "CVE-2019-11250"

symbols = ["debuggingRoundTripper.RoundTrip"]

[[versions]]
fixed = "v0.17.0"

[[additional_packages]]
module = "k8s.io/kubernetes"
package = "k8s.io/kubernetes/staging/src/k8s.io/client-go/transport"
symbols = ["debuggingRoundTripper.RoundTrip"]
[[additional_packages.versions]]
fixed = "v1.16.0-beta.1"

[links]
commit = "https://github.com/kubernetes/kubernetes/commit/4441f1d9c3e94d9a3d93b4f184a591cab02a5245"
pr = "https://github.com/kubernetes/kubernetes/pull/81330"
context = ["https://github.com/kubernetes/kubernetes/issues/81114"]

# This is a really confusing one to classify becuase of how kubernetes
# does their vendoring stuff.