Affected by GO-2024-3291
and 4 other vulnerabilities
GO-2024-3291: Re-creating a deleted user in lakeFS will re-enable previous user credentials that existed prior to its deletion in github.com/treeverse/lakefs
GO-2025-3479: lakeFS allows an authenticated user to cause a crash by exhausting server memory in github.com/treeverse/lakefs
GO-2025-4090: lakeFS affected by unauthenticated access to API usage metrics in github.com/treeverse/lakefs
GO-2026-4321: lakeFS is Missing Timestamp Validation in S3 Gateway Authentication in github.com/treeverse/lakefs
GO-2026-4494: lakeFS vulnerable to path traversal in local block adapter allow cross-namespace and sibling directory access in github.com/treeverse/lakefs
Package testcode contains code and generated code for testing wrapgen.
It will only give correct results if "go generate" has run on it, so CI
must do that outside of the test.
type Arithmetic interface {
Add(a, b int) int// Double returns an error, so it should be wrapped to measure its// duration.
Double(a int) (int, error)
}