Skip to content
OpenAdvisories

Package · crates.io

object_store

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2024-41178

    Apache Arrow Rust Object Store: AWS WebIdentityToken exposure in log files

    Exposure of temporary credentials in logs in Apache Arrow Rust Object Store (`object_store` crate), version 0.10.1 and earlier on all platforms using AWS WebIdentityTokens.  On certain error conditions, the logs may contain the OIDC token passed to AssumeRole…

    Apache Software Foundation Apache Arrow Rust Object Store object_store crates.io