{"action":"Upgrade aws-sigv4 to 0.2.1 or later.","affected":[{"fixed":"0.2.1","introduced":"0.0.0-0"},{"fixed":"0.3.1","introduced":"0.3.0-0"},{"fixed":"0.5.3","introduced":"0.4.0-0"},{"fixed":"0.6.1","introduced":"0.6.0-0"},{"fixed":"0.7.1","introduced":"0.7.0-0"},{"fixed":"0.8.1","introduced":"0.8.0-0"},{"fixed":"0.9.1","introduced":"0.9.0-0"},{"fixed":"0.10.2","introduced":"0.10.0-0"},{"fixed":"0.11.1","introduced":"0.11.0-0"},{"fixed":"0.12.1","introduced":"0.12.0-0"},{"fixed":"0.13.1","introduced":"0.13.0-0"},{"fixed":"0.14.1","introduced":"0.14.0-0"},{"fixed":"0.15.1","introduced":"0.15.0-0"},{"fixed":"0.46.1","introduced":"0.16.0-0"},{"fixed":"0.47.1","introduced":"0.47.0-0"},{"fixed":"0.48.1","introduced":"0.48.0-0"},{"fixed":"0.49.1","introduced":"0.49.0-0"},{"fixed":"0.50.1","introduced":"0.50.0-0"},{"fixed":"0.51.1","introduced":"0.51.0-0"},{"fixed":"0.52.1","introduced":"0.52.0-0"},{"fixed":"0.53.2","introduced":"0.53.0-0"},{"fixed":"0.54.2","introduced":"0.54.0-0"},{"fixed":"0.55.1","introduced":"0.55.0-0"}],"component":"aws-sigv4","cve_ids":["CVE-2023-30610"],"ecosystem":"crates.io","epss":0.00214,"exploited":false,"fixed_versions":["0.2.1","0.3.1","0.5.3","0.6.1","0.7.1","0.8.1","0.9.1","0.10.2","0.11.1","0.12.1","0.13.1","0.14.1","0.15.1","0.46.1","0.47.1","0.48.1","0.49.1","0.50.1","0.51.1","0.52.1","0.53.2","0.54.2","0.55.1"],"ghsa_id":"GHSA-mjv9-vp6w-3rc9","id":"tcs_01M5KF8YMV7DSN6TYXYTMEDV2Z","modified_at":"2026-10-12T18:00:06.111286050Z","published_at":"2023-04-19T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2023-0125","https://crates.io/crates/aws-sigv4","https://rustsec.org/advisories/RUSTSEC-2023-0125.html","https://github.com/smithy-lang/smithy-rs/pull/2562"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2023-0125","url":"https://osv.dev/vulnerability/RUSTSEC-2023-0125"}],"summary":"Logs AWS credentials when TRACE-level logging is enabled"}