CVE-2024-41178

The Apache Arrow Rust Object Store (object_store crate) versions 0.10.1 and earlier are vulnerable to the exposure of temporary credentials in logs when using AWS WebIdentityTokens on all platforms. Due to specific error conditions and automatic retries, the underlying reqwest error —which may in...