Skip to content
OpenAdvisories
Medium · 5.6 CVE-2022-39397 EUVD-2022-7215GHSA-3w3h-7xgx-grwcRUSTSEC-2022-0089

Exposure of sensitive information in aliyun-oss-client

Published Nov 22, 2022 · Updated Apr 23, 2025 · Assigned by GitHub_M

Description

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1.

Affected products

VendorProductAffectedFixed
tu6ge oss-rs < 0.8.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io aliyun-oss-client < 0.8.1 0.8.1 GHSA-3w3h-7xgx-grwc
crates.io aliyun-oss-client >= 0.0.0-0, < 0.8.1 0.8.1 RUSTSEC-2022-0089

References