CVE-2024-41178

The Apache Arrow Rust Object Store (object_store crate) versions 0.10.1 and earlier are vulnerable to credential exposure when using AWS WebIdentityTokens on all platforms. Under specific error conditions involving automatic retries, the underlying reqwest error—which may include the full URL wit...