https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T03:04:24.639985+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-233405 EUVD-2026-233405 2026-10-23T03:04:24.643696+00:00 EUVD-2026-233405 https://cve.radiocsirt.org/vuln/fkie_cve-2022-39397 fkie_cve-2022-39397 2026-10-23T03:04:24.643730+00:00

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1.

 https://cve.radiocsirt.org/vuln/ghsa-3w3h-7xgx-grwc GHSA-3w3h-7xgx-grwc — Leak in Aliyun KeySecret 2026-10-23T03:04:24.643790+00:00

Affected: crates.io: aliyun-oss-client

### Impact Users of this library will be affected when using this library, the incoming secret will be disclosed unintentionally.

### Patches This have already been solved.

### Workarounds No, It cannot be patched without upgrading

### References No

### For more information If you have any questions or comments about this advisory: * Email us at [email address](mailto:772364230@qq.com)

 https://cve.radiocsirt.org/vuln/gsd-2022-39397 gsd-2022-39397 2026-10-23T03:04:24.643818+00:00 gsd-2022-39397 https://cve.radiocsirt.org/vuln/rustsec-2022-0089 RUSTSEC-2022-0089 — `aliyun-oss-client` secret exposure 2026-10-23T03:04:24.643831+00:00

Affected: crates.io: aliyun-oss-client

The `aliyun-oss-client` unintentionally divulges the authentication secret.

This bug was fixed in [this](https://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29) commit by limiting the concerned traits to be `pub` only within the crate.