advisory-db/crates/slack-morphism/RUSTSEC-2022-0087.md

[advisory]
id = "RUSTSEC-2022-0087"
package = "slack-morphism"
date = "2022-10-10"
url = "https://github.com/abdolence/slack-morphism-rust/commit/65ef9fac4f39c4e171e2952a6cf029bb0d059a89"
aliases = ["CVE-2022-39292", "GHSA-4mjx-2gh5-ph8h"]

[versions]
patched = [">= 1.3.2"]

Slack Webhooks secrets leak in debug logs

Debug log formatting made it possible to leak Webhooks secrets into debug logs.

The patched version has introduced more strict checks to avoid this.