{"action":"Upgrade hubuum_client to 0.6.1 or later.","affected":[{"fixed":"0.6.1","introduced":"0.0.1"}],"component":"hubuum_client","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.6.1"],"ghsa_id":"GHSA-f45q-w629-wr25","id":"tcs_01M5KEX6030YTPC7QJARDVPJ36","modified_at":"2026-07-24T22:00:26.904951923Z","published_at":"2026-07-24T21:48:36Z","references":["https://osv.dev/vulnerability/GHSA-f45q-w629-wr25","https://github.com/hubuum/hubuum-client-rust/security/advisories/GHSA-f45q-w629-wr25","https://github.com/hubuum/hubuum-client-rust/commit/5a5c275ffa45f342459b7d3e977926da643bde50","https://github.com/hubuum/hubuum-client-rust"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-f45q-w629-wr25","url":"https://osv.dev/vulnerability/GHSA-f45q-w629-wr25"}],"summary":"Hubuum client library (Rust): Authenticated requests may escape the configured base path through redirects"}