HistoryEdit

RUSTSEC-2022-0087

Slack Webhooks secrets leak in debug logs

Reported
Issued
Package
slack-morphism (crates.io)
Type
Vulnerability
Aliases
Details
https://github.com/abdolence/slack-morphism-rust/commit/65ef9fac4f39c4e171e2952a6cf029bb0d059a89
Patched
  • >=1.3.2

Description

Debug log formatting made it possible to leak Webhooks secrets into debug logs.

The patched version has introduced more strict checks to avoid this.