CVE-2026-22782
1 advisory.
crates.io/rustfs CVE-2026-22782: low
RustFS's RPC signature verification logs shared secret
Action: Upgrade rustfs to 1.0.0-alpha.80 or later.
cargo update -p rustfs --precise 1.0.0-alpha.80Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0-alpha.1 | 1.0.0-alpha.80 | - |
Fixed versions
| 1.0.0-alpha.80 |
Sources
- osv: GHSA-333v-68xh-8mmq
- https://github.com/rustfs/rustfs/security/advisories/GHSA-333v-68xh-8mmq
- https://nvd.nist.gov/vuln/detail/CVE-2026-22782
- https://github.com/rustfs/rustfs/commit/6b2eebee1d07399ef02c0863bd515b4412a5a560
- https://github.com/rustfs/rustfs
- https://github.com/rustfs/rustfs/blob/9e162b6e9ebb874cc1d06a7b33bc4a05786578aa/crates/ecstore/src/rpc/http_auth.rs#L115-L122
CVE-2026-22782 · published · modified · JSON