OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-02-23 15:38:27 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
98e8483ac17d42eeeeee51d4d02ad8a690bd12c7
advisory-db/crates/matrix-sdk/RUSTSEC-2022-0062.md
Alexis Mousset 84c633df9c Update aliases from GHSA OSV export (#1693)
2023-06-13 15:10:24 +02:00

595 B
Raw Blame History 

[advisory]
id = "RUSTSEC-2022-0062"
package = "matrix-sdk"
date = "2022-10-24"
url = "https://github.com/matrix-org/matrix-rust-sdk/issues/1110"
aliases = ["GHSA-fc4h-xcf3-qj5f"]

[versions]
patched = [">= 0.6.2"]
unaffected = ["< 0.6.0"]

matrix-sdk 0.6.0 logs access tokens

When sending Matrix requests using an affected version of matrix-sdk in an application that writes logs using tracing-subscriber (in a way that includes fields of tracing spans such as tracing_subscribers default text output from the fmt module), these logs will contain the user's access token.