CVE-2022-39397
Exposure of sensitive information in aliyun-oss-client
Summary
Exposure of sensitive information in aliyun-oss-client
Original description
The description as published by the source.
aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
crates.io
aliyun-oss-client
[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.8.1"}]}]
References
- advisory rustsec.org
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- package crates.io
- patch github.com