CVE-2022-39397

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1.

Score

CVSS 3.1 5.6 Medium

Status

Modified - security-advisories@github.com

Published

2022-11-22

Last modified

2025-04-23

Weaknesses

CWE-200

Affected products

• Aliyun-oss-client (Aliyun-oss-client Project)
• Oss-rs (Tu6ge)

References

• https://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29
• https://github.com/tu6ge/oss-rs/security/advisories/GHSA-3w3h-7xgx-grwc