https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T04:01:58.387816+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-39397 CVE-2022-39397 — Exposure of sensitive information in aliyun-oss-client 2026-10-23T04:01:58.485442+00:00

Affected: tu6ge oss-rs

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1.

 https://cve.radiocsirt.org/vuln/rustsec-2022-0089 RUSTSEC-2022-0089 — `aliyun-oss-client` secret exposure 2026-10-23T04:01:58.485553+00:00

Affected: crates.io: aliyun-oss-client

The `aliyun-oss-client` unintentionally divulges the authentication secret.

This bug was fixed in [this](https://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29) commit by limiting the concerned traits to be `pub` only within the crate.