advisory-db/crates/slack-morphism/RUSTSEC-2022-0086.md

[advisory]
id = "RUSTSEC-2022-0086"
package = "slack-morphism"
date = "2022-07-22"
url = "https://github.com/abdolence/slack-morphism-rust/pull/133"
aliases = ["CVE-2022-31162", "GHSA-99j7-mhfh-w84p"]
cvss = "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"

[versions]
patched = [">= 0.41.0"]

Slack OAuth Secrets leak in debug logs

Debug log formatting made it possible to leak OAuth secrets into debug logs.

The patched version has introduced more strict checks to avoid this.