CVE-2024-41178
2 advisories.
crates.io/object_store CVE-2024-41178: low 3.8, EPSS 0.71%
Apache Arrow Rust Object Store: AWS WebIdentityToken exposure in log files
Action: Upgrade object_store to 0.10.2 or later.
cargo update -p object_store --precise 0.10.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.5.0 | 0.10.2 | - |
Fixed versions
| 0.10.2 |
Sources
- osv: GHSA-c2hf-vcmr-qjrf
- https://nvd.nist.gov/vuln/detail/CVE-2024-41178
- https://github.com/apache/arrow-rs/pull/6074
- https://github.com/apache/arrow-rs/commit/4978e32654235f569062f2cad6c7361e410f1254
- https://github.com/apache/arrow-rs
- https://lists.apache.org/thread/3t0povdppnt2czv6crlsqhvyko93kcrg
- https://rustsec.org/advisories/RUSTSEC-2024-0358.html
- http://www.openwall.com/lists/oss-security/2024/07/23/3
CVE-2024-41178 · published · modified · JSON
crates.io/object_store CVE-2024-41178: low 3.8, EPSS 0.71%
Apache Arrow Rust Object Store: AWS WebIdentityToken exposure in log files
Action: Upgrade object_store to 0.10.2 or later.
cargo update -p object_store --precise 0.10.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.5.0 | 0.10.2 | - |
Fixed versions
| 0.10.2 |
Sources
- osv: RUSTSEC-2024-0358
- https://crates.io/crates/object_store
- https://rustsec.org/advisories/RUSTSEC-2024-0358.html
- https://github.com/apache/arrow-rs/pull/6074
- https://www.openwall.com/lists/oss-security/2024/07/23/3
CVE-2024-41178 · published · modified · JSON