CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: cargobump, dynamic-localpv-provisioner-fips, container-object-storage-interface-fips, velero-plugin-for-aws, bom, kuberlr, terraform-provider-azapi, maru, cluster-api-provider-vsphere, kubernetes-dashboard-auth-fips, chisel-fips, consul-k8s-fips,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: cargobump, grafana-rollout-operator, gitea, container-object-storage-interface-fips, argo-workflows, bom, terraform-provider-azapi, consul-k8s-fips, cass-operator-fips-no-pvc-delete, harbor, contour, steampipe, rancher-fleet-fips, elvish, gobump,...

CVE-2023-30610

aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The awssigv4::SigningParams struct had a derived Debug implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is...

curl:curl_fuzzer_http: Heap-buffer-overflow in canon_query

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6211974444482560 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerhttp Job Type: libfuzzerasani386curl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf610365c...

CVE-2023-30610

aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The awssigv4::SigningParams struct had a derived Debug implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is...

CVE-2023-30610

aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The "awssigv4::SigningParams" struct had a derived "Debug" implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging...

CVE-2023-30610 AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending

aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The awssigv4::SigningParams struct had a derived Debug implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is...

CVE-2023-30610

The CVE affects aws-sigv4 in the AWS SDK for Rust: the SigningParams Debug output can expose a user’s AWS access key, secret key, and session token when TRACE-level logging is enabled, allowing credentials to appear in logs. Affected users should upgrade to fixed releases; patches are listed acro...

aware (>=0.0.1, <=0.0.6), aws-config (>=0.0.22-alpha, <=0.0.26-alpha) +288 more potentially affected by CVE-2023-30610 via aws-sigv4 (>=0.0.22-alpha, <=0.0.26-alpha)

aws-sigv4 CARGO version =0.0.22-alpha, =0.0.1, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.22-alpha, =0.0.26-alpha and more Source cves:...

aware (>=0.0.9, <=0.0.13), aws-config (>=0.4.0, <=0.4.1) +304 more potentially affected by CVE-2023-30610 via aws-sigv4 (0.4.2)

aws-sigv4 CARGO version 0.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sigv4 and may be impacted: - aware =0.0.9, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.1 and more...

CVE-2023-30610: Insertion of Sensitive Information into Log File

aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The awssigv4::SigningParams struct had a derived Debug implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is...

curl:curl_fuzzer_http: Stack-buffer-overflow in Curl_output_aws_sigv4

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5950791701889024 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerhttp Job Type: libfuzzerasani386curl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0xffc44cc5...

curl:curl_fuzzer_http: Stack-buffer-overflow in Curl_output_aws_sigv4

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6150277690687488 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzerhttp Job Type: aflasancurl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7ffc5d4d7f75 Crash State:...