crates.io/aliyun-oss-client CVE-2022-39397: medium 5.6, EPSS 0.47%

Leak in Aliyun KeySecret

Action: Upgrade aliyun-oss-client to 0.8.1 or later.

cargo update -p aliyun-oss-client --precise 0.8.1

Affected

Fixed versions

Sources

• osv: GHSA-3w3h-7xgx-grwc
• https://github.com/tu6ge/oss-rs/security/advisories/GHSA-3w3h-7xgx-grwc
• https://nvd.nist.gov/vuln/detail/CVE-2022-39397
• https://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29
• https://github.com/tu6ge/oss-rs
• https://rustsec.org/advisories/RUSTSEC-2022-0089.html

CVE-2022-39397 · published 2022-11-21T20:39:05Z · modified 2023-11-08T04:10:21.081461Z · JSON