OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-30 16:24:05 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add slack-morphism CVE-2022-39292 (#1557)

Browse Source
This commit is contained in:
pinkforest(she/her)
2023-02-02 22:44:52 +11:00
committed by GitHub
parent e572c789de
commit 8a527f394d
1 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
crates/slack-morphism/RUSTSEC-0000-0000.md Normal file
View File

@@ -0,0 +1,16 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "slack-morphism"
date = "2022-10-10"
url = "https://github.com/abdolence/slack-morphism-rust/commit/65ef9fac4f39c4e171e2952a6cf029bb0d059a89"
aliases = ["CVE-2022-39292", "GHSA-4mjx-2gh5-ph8h"]
[versions]
patched = [">= 1.3.2"]
```
# Slack Webhooks secrets leak in debug logs
Debug log formatting made it possible to leak Webhooks secrets into debug logs.
The patched version has introduced more strict checks to avoid this.