{"action":"Upgrade hubuum_client to 0.6.1 or later.","affected":[{"fixed":"0.6.1","introduced":"0.3.0"}],"component":"hubuum_client","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.6.1"],"ghsa_id":"GHSA-qqc3-94qv-7fw3","id":"tcs_01M5KF2PYKA1RBGQENS3TB3EES","modified_at":"2026-07-24T22:00:28.287000346Z","published_at":"2026-07-24T21:49:05Z","references":["https://osv.dev/vulnerability/GHSA-qqc3-94qv-7fw3","https://github.com/hubuum/hubuum-client-rust/security/advisories/GHSA-qqc3-94qv-7fw3","https://github.com/hubuum/hubuum-client-rust/commit/5a5c275ffa45f342459b7d3e977926da643bde50","https://github.com/hubuum/hubuum-client-rust","https://github.com/hubuum/hubuum-client-rust/releases/tag/v0.6.1"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-qqc3-94qv-7fw3","url":"https://osv.dev/vulnerability/GHSA-qqc3-94qv-7fw3"}],"summary":"Hubuum client library (Rust): Configured custom transports may be bypassed, exposing credentials and network traffic"}