{"action":"Upgrade aws-sigv4 to 0.2.1 or later.","affected":[{"fixed":"0.55.1","introduced":"0.55.0"},{"fixed":"0.54.2","introduced":"0.54.1"},{"fixed":"0.53.2","introduced":"0.53.1"},{"fixed":"0.52.1","introduced":"0.52.0"},{"fixed":"0.51.1","introduced":"0.51.0"},{"fixed":"0.49.1","introduced":"0.49.0"},{"fixed":"0.48.1","introduced":"0.48.0"},{"fixed":"0.47.1","introduced":"0.47.0"},{"fixed":"0.46.1","introduced":"0.46.0"},{"fixed":"0.15.1","introduced":"0.15.0"},{"fixed":"0.14.1","introduced":"0.14.0"},{"fixed":"0.13.1","introduced":"0.13.0"},{"fixed":"0.12.1","introduced":"0.12.0"},{"fixed":"0.11.1","introduced":"0.11.0"},{"fixed":"0.10.2","introduced":"0.10.1"},{"fixed":"0.9.1","introduced":"0.9.0"},{"fixed":"0.8.1","introduced":"0.8.0"},{"fixed":"0.7.1","introduced":"0.7.0"},{"fixed":"0.6.1","introduced":"0.6.0"},{"fixed":"0.5.3","introduced":"0.5.2"},{"fixed":"0.4.2","introduced":"0.4.1"},{"fixed":"0.3.1","introduced":"0.3.0"},{"fixed":"0.2.1","introduced":"0.2.0"}],"component":"aws-sigv4","cve_ids":["CVE-2023-30610"],"ecosystem":"crates.io","epss":0.00214,"exploited":false,"fixed_versions":["0.55.1","0.54.2","0.53.2","0.52.1","0.51.1","0.49.1","0.48.1","0.47.1","0.46.1","0.15.1","0.14.1","0.13.1","0.12.1","0.11.1","0.10.2","0.9.1","0.8.1","0.7.1","0.6.1","0.5.3","0.4.2","0.3.1","0.2.1"],"ghsa_id":"GHSA-mjv9-vp6w-3rc9","id":"tcs_01M5KF1R094V35R758QWB7E0M1","modified_at":"2026-04-06T17:38:55.716713Z","published_at":"2023-04-26T16:01:10Z","references":["https://osv.dev/vulnerability/GHSA-mjv9-vp6w-3rc9","https://github.com/awslabs/aws-sdk-rust/security/advisories/GHSA-mjv9-vp6w-3rc9","https://nvd.nist.gov/vuln/detail/CVE-2023-30610","https://github.com/awslabs/aws-sdk-rust","https://rustsec.org/advisories/RUSTSEC-2023-0125.html"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-mjv9-vp6w-3rc9","url":"https://osv.dev/vulnerability/GHSA-mjv9-vp6w-3rc9"}],"summary":"AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending"}