CVE-2022-31162

Slack Morphism is an async client library for Rust. Prior to 0.41.0, it was possible for Slack OAuth client information to leak in application debug logs. Stricter and more secure debug formatting was introduced in v0.41.0 for OAuth secret types to reduce the possibility of printing sensitive...

slack-morphism-hyper (>=0.10.0 <=0.40.0), slack-paste (=0.1.0) potentially affected by CVE-2022-31162 via slack-morphism (>=0.10.0 <=0.40.0)

slack-morphism CARGO version =0.10.0, =0.10.0, =0.40.0 - slack-paste =0.1.0 Source cves: CVE-2022-31162 Source advisory: OSV:RUSTSEC-2022-0086...

CVE-2022-31162

CVE-2022-31162 affects Slack Morphism (Rust) prior to 0.41.0. The root issue was overly verbose debug formatting that could cause Slack OAuth client information to leak into application logs. Exploitation guidance is not provided in the documents; however, various sources confirm an information d...

slack-morphism-hyper (>=0.10.0 <=0.40.0), slack-paste (=0.1.0) potentially affected by CVE-2022-31162 via slack-morphism (>=0.10.0 <=0.40.0)

slack-morphism CARGO version =0.10.0, =0.10.0, =0.40.0 - slack-paste =0.1.0 Source cves: CVE-2022-31162 Source advisory: OSV:GHSA-99J7-MHFH-W84P...