Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 275/275 feeds/APIs · 469/469 docs · 7/9 advisories · checked 10:31 UTC Customize Public modeDiscuss ChangeIntel on Discord

AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending

cve-program · CVE-2023-30610

Published

aws-sdk-rust

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "awslabs",
                    "product": "aws-sdk-rust",
                    "versions": [
                        {
                            "version": ">= 0.2.0, < 0.2.1",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.3.0, < 0.3.1",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.4.1, < 0.4.2",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.5.2, < 0.5.3",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.6.0, < 0.6.1",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.7.0, < 0.7.1",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.8.0, < 0.8.1",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.9.0, < 0.9.1",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.10.1, < 0.10.2",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.11.0, < 0.11.1",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.12.0, < 0.12.1",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.13.0, < 0.13.1",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.14.0, < 0.14.1",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.15.0, < 0.15.1",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.46.0, < 0.46.1",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.47.0, < 0.47.1",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.48.0, < 0.48.1",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.49.0, < 0.49.1",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.50.0, < 0.51.1",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.52.0, < 0.52.1, ",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.53.1, < 0.53.2",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.54.1, < 0.54.2",
                            "status": "affected"
                        },
                        {
                            "version": ">= 0.55.0, < 0.55.1",
                            "status": "affected"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

euvd · EUVD-2023-1355

Published

EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.

Original publisher date fields

datePublished: Apr 19, 2023, 5:18:54 PM

dateUpdated: Feb 5, 2025, 2:56:14 PM

No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.

Original source record · Cite this exact observation · Complete original publisher JSON

nvd · CVE-2023-30610

Published

NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.

Source analysis status: Modified

Weakness classifications: CWE-532

Original publisher date fields

published: 2023-04-19T18:15:07.417

lastModified: 2026-06-17T05:55:07.997

24 source CPE criteria · context only
  • cpe:2.3:a:amazon:aws-sigv4:0.2.0:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.3.0:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.4.1:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.5.2:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.6.0:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.7.0:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.8.0:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.9.0:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.10.1:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.11.0:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.12.0:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.13.0:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.14.0:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.15.0:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.46.0:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.47.0:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.48.0:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.49.0:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.50.0:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.51.0:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.52.0:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.53.1:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.54.1:*:*:*:*:rust:*:*
  • cpe:2.3:a:amazon:aws-sigv4:0.55.0:*:*:*:*:rust:*:*

The original JSON retains the logical configuration operators, exclusions and version bounds.

No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.

Original source record · Cite this exact observation · Complete original publisher JSON

osv · GHSA-mjv9-vp6w-3rc9

Published

aws-sigv4

crates.io

SEMVER · introduced 0.55.0 → fixed 0.55.1

1 explicitly affected versions

0.55.0

aws-sigv4

crates.io

SEMVER · introduced 0.54.1 → fixed 0.54.2

1 explicitly affected versions

0.54.1

aws-sigv4

crates.io

SEMVER · introduced 0.53.1 → fixed 0.53.2

1 explicitly affected versions

0.53.1

aws-sigv4

crates.io

SEMVER · introduced 0.52.0 → fixed 0.52.1

1 explicitly affected versions

0.52.0

aws-sigv4

crates.io

SEMVER · introduced 0.51.0 → fixed 0.51.1

1 explicitly affected versions

0.51.0

aws-sigv4

crates.io

SEMVER · introduced 0.49.0 → fixed 0.49.1

1 explicitly affected versions

0.49.0

aws-sigv4

crates.io

SEMVER · introduced 0.48.0 → fixed 0.48.1

1 explicitly affected versions

0.48.0

aws-sigv4

crates.io

SEMVER · introduced 0.47.0 → fixed 0.47.1

1 explicitly affected versions

0.47.0

aws-sigv4

crates.io

SEMVER · introduced 0.46.0 → fixed 0.46.1

1 explicitly affected versions

0.46.0

aws-sigv4

crates.io

SEMVER · introduced 0.15.0 → fixed 0.15.1

1 explicitly affected versions

0.15.0

aws-sigv4

crates.io

SEMVER · introduced 0.14.0 → fixed 0.14.1

1 explicitly affected versions

0.14.0

aws-sigv4

crates.io

SEMVER · introduced 0.13.0 → fixed 0.13.1

1 explicitly affected versions

0.13.0

aws-sigv4

crates.io

SEMVER · introduced 0.12.0 → fixed 0.12.1

1 explicitly affected versions

0.12.0

aws-sigv4

crates.io

SEMVER · introduced 0.11.0 → fixed 0.11.1

1 explicitly affected versions

0.11.0

aws-sigv4

crates.io

SEMVER · introduced 0.10.1 → fixed 0.10.2

1 explicitly affected versions

0.10.1

aws-sigv4

crates.io

SEMVER · introduced 0.9.0 → fixed 0.9.1

1 explicitly affected versions

0.9.0

aws-sigv4

crates.io

SEMVER · introduced 0.8.0 → fixed 0.8.1

1 explicitly affected versions

0.8.0

aws-sigv4

crates.io

SEMVER · introduced 0.7.0 → fixed 0.7.1

1 explicitly affected versions

0.7.0

aws-sigv4

crates.io

SEMVER · introduced 0.6.0 → fixed 0.6.1

1 explicitly affected versions

0.6.0

aws-sigv4

crates.io

SEMVER · introduced 0.5.2 → fixed 0.5.3

1 explicitly affected versions

0.5.2

aws-sigv4

crates.io

SEMVER · introduced 0.4.1 → fixed 0.4.2

1 explicitly affected versions

0.4.1

aws-sigv4

crates.io

SEMVER · introduced 0.3.0 → fixed 0.3.1

1 explicitly affected versions

0.3.0

aws-sigv4

crates.io

SEMVER · introduced 0.2.0 → fixed 0.2.1

1 explicitly affected versions

0.2.0

Original source record · Cite this exact observation · Complete original publisher JSON

osv · RUSTSEC-2023-0125

Published

aws-sigv4

crates.io

SEMVER · introduced 0.0.0-0 → fixed 0.2.1 → introduced 0.3.0-0 → fixed 0.3.1 → introduced 0.4.0-0 → fixed 0.5.3 → introduced 0.6.0-0 → fixed 0.6.1 → introduced 0.7.0-0 → fixed 0.7.1 → introduced 0.8.0-0 → fixed 0.8.1 → introduced 0.9.0-0 → fixed 0.9.1 → introduced 0.10.0-0 → fixed 0.10.2 → introduced 0.11.0-0 → fixed 0.11.1 → introduced 0.12.0-0 → fixed 0.12.1 → introduced 0.13.0-0 → fixed 0.13.1 → introduced 0.14.0-0 → fixed 0.14.1 → introduced 0.15.0-0 → fixed 0.15.1 → introduced 0.16.0-0 → fixed 0.46.1 → introduced 0.47.0-0 → fixed 0.47.1 → introduced 0.48.0-0 → fixed 0.48.1 → introduced 0.49.0-0 → fixed 0.49.1 → introduced 0.50.0-0 → fixed 0.50.1 → introduced 0.51.0-0 → fixed 0.51.1 → introduced 0.52.0-0 → fixed 0.52.1 → introduced 0.53.0-0 → fixed 0.53.2 → introduced 0.54.0-0 → fixed 0.54.2 → introduced 0.55.0-0 → fixed 0.55.1

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 10 Nov 10:31 UTC · 275 of 275 readable · 273 fully read · documentation 469/469 current