Apache Arrow Rust Object Store vulnerabilities

1 known vulnerability in Apache Arrow Rust Object Store from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Apache Arrow Rust Object Store: Insertion of Sensitive Information into Log File

  CVE-2024-41178Jul 23, 2024Apache

  Exposure of temporary credentials in logs in Apache Arrow Rust Object Store (`object_store` crate), version 0.10.1 and earlier on all platforms using AWS WebIdentityTokens. On certain error conditions, the logs may contain the OIDC token passed to AssumeRoleWi