OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-01-02 09:36:40 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add slack-morphism CVE-2022-31162 (#1556)

Browse Source
This commit is contained in:
pinkforest(she/her)
2023-02-02 22:43:19 +11:00
committed by GitHub
parent 6d67664d5c
commit f134e7d43f
1 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
crates/slack-morphism/RUSTSEC-0000-0000.md Normal file
View File

@@ -0,0 +1,17 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "slack-morphism"
date = "2022-07-22"
url = "https://github.com/abdolence/slack-morphism-rust/pull/133"
aliases = ["CVE-2022-31162", "GHSA-99j7-mhfh-w84p"]
cvss = "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
[versions]
patched = [">= 0.41.0"]
```
# Slack OAuth Secrets leak in debug logs
Debug log formatting made it possible to leak OAuth secrets into debug logs.
The patched version has introduced more strict checks to avoid this.