CVE-2024-35232: Facebook

Low severity, CVSS 3.7. EPSS: 0.5% chance of exploitation in the next 30 days.

github.com/huandu/facebook is a Go package that fully supports the Facebook Graph API with file upload, batch request and marketing API. access_token can be exposed in error message on fail in HTTP request. This issue has been patched in version 2.7.2.

Affected products

• Facebook Facebook: up to and including 2.7.1
• Huandu Facebook: up to and including 2.7.1

Published 2024-05-24. Last modified 2026-06-17.