google/google-api-ruby-client
main@ f4409d0
Fixes3
CVEs0
Peak severityHigh
Commits27,128
Regression coverage0.0%
Highlights
Information Disclosure: 2 prior fixes. Scrutinize any change in this area.
google-apis-core/google-apis-core.gemspec: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
Information Disclosure: Debug logging of HTTP commands can leak sensitive nested payload data when redaction is not recursive, as evidenced by a prior bypass involving SecretPayload-like objects.
Information Disclosure: Inspection logging of HTTP responses can expose sensitive response classes; a fix was required to redact such logs, indicating response logging is a distinct but related leak vector.
Dependency Vulnerability: The addressable dependency carried a known vulnerability, requiring an upgrade to a patched version; dependency hygiene is critical for the core gem.
Last analyzed 31 Aug 2026, 03:48 UTC