{"id":"CVE-2023-30610","aliases":["EUVD-2023-1355","GHSA-mjv9-vp6w-3rc9","RUSTSEC-2023-0125"],"status":"published","title":"AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending","description":"aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The `aws_sigv4::SigningParams` struct had a derived `Debug` implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is enabled for an SDK, `SigningParams` is printed, thereby revealing those credentials to anyone with access to logs. All users of the AWS SDK for Rust who enabled TRACE-level logging, either globally (e.g. `RUST_LOG=trace`), or for the `aws-sigv4` crate specifically are affected. This issue has been addressed in a set of new releases. Users are advised to upgrade. Users unable to upgrade should disable TRACE-level logging for AWS Rust SDK crates.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00214,"percentile":0.11879,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-532"],"published":"2023-04-19T12:00:00Z","modified":"2026-10-28T02:30:53Z","fixes":[{"ecosystem":"crates.io","package":"aws-sigv4","fixed_in":["0.55.1","0.54.2","0.53.2","0.52.1","0.51.1","0.49.1","0.48.1","0.47.1","0.46.1","0.15.1","0.14.1","0.13.1","0.12.1","0.11.1","0.10.2","0.9.1","0.8.1","0.7.1","0.6.1","0.5.3","0.4.2","0.3.1","0.2.1","0.50.1"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.55.0"},{"last_affected":"0.55.0"},{"fixed":"0.55.1"}]}],"versions":["0.55.0"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.54.1"},{"last_affected":"0.54.1"},{"fixed":"0.54.2"}]}],"versions":["0.54.1"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.53.1"},{"last_affected":"0.53.1"},{"fixed":"0.53.2"}]}],"versions":["0.53.1"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.52.0"},{"last_affected":"0.52.0"},{"fixed":"0.52.1"}]}],"versions":["0.52.0"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.51.0"},{"last_affected":"0.51.0"},{"fixed":"0.51.1"}]}],"versions":["0.51.0"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.49.0"},{"last_affected":"0.49.0"},{"fixed":"0.49.1"}]}],"versions":["0.49.0"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.48.0"},{"last_affected":"0.48.0"},{"fixed":"0.48.1"}]}],"versions":["0.48.0"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.47.0"},{"last_affected":"0.47.0"},{"fixed":"0.47.1"}]}],"versions":["0.47.0"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.46.0"},{"last_affected":"0.46.0"},{"fixed":"0.46.1"}]}],"versions":["0.46.0"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.15.0"},{"last_affected":"0.15.0"},{"fixed":"0.15.1"}]}],"versions":["0.15.0"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.14.0"},{"last_affected":"0.14.0"},{"fixed":"0.14.1"}]}],"versions":["0.14.0"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.13.0"},{"last_affected":"0.13.0"},{"fixed":"0.13.1"}]}],"versions":["0.13.0"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.12.0"},{"last_affected":"0.12.0"},{"fixed":"0.12.1"}]}],"versions":["0.12.0"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.11.0"},{"last_affected":"0.11.0"},{"fixed":"0.11.1"}]}],"versions":["0.11.0"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.10.1"},{"last_affected":"0.10.1"},{"fixed":"0.10.2"}]}],"versions":["0.10.1"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.9.0"},{"last_affected":"0.9.0"},{"fixed":"0.9.1"}]}],"versions":["0.9.0"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.0"},{"last_affected":"0.8.0"},{"fixed":"0.8.1"}]}],"versions":["0.8.0"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.7.0"},{"last_affected":"0.7.0"},{"fixed":"0.7.1"}]}],"versions":["0.7.0"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.6.0"},{"last_affected":"0.6.0"},{"fixed":"0.6.1"}]}],"versions":["0.6.0"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.2"},{"last_affected":"0.5.2"},{"fixed":"0.5.3"}]}],"versions":["0.5.2"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.4.1"},{"last_affected":"0.4.1"},{"fixed":"0.4.2"}]}],"versions":["0.4.1"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.0"},{"last_affected":"0.3.0"},{"fixed":"0.3.1"}]}],"versions":["0.3.0"]},{"source":"ghsa","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.2.0"},{"last_affected":"0.2.0"},{"fixed":"0.2.1"}]}],"versions":["0.2.0"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.55.0"},{"fixed":"0.55.1"}]}],"versions":["0.55.0"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.54.1"},{"fixed":"0.54.2"}]}],"versions":["0.54.1"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.53.1"},{"fixed":"0.53.2"}]}],"versions":["0.53.1"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.52.0"},{"fixed":"0.52.1"}]}],"versions":["0.52.0"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.51.0"},{"fixed":"0.51.1"}]}],"versions":["0.51.0"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.49.0"},{"fixed":"0.49.1"}]}],"versions":["0.49.0"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.48.0"},{"fixed":"0.48.1"}]}],"versions":["0.48.0"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.47.0"},{"fixed":"0.47.1"}]}],"versions":["0.47.0"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.46.0"},{"fixed":"0.46.1"}]}],"versions":["0.46.0"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.15.0"},{"fixed":"0.15.1"}]}],"versions":["0.15.0"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.14.0"},{"fixed":"0.14.1"}]}],"versions":["0.14.0"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.13.0"},{"fixed":"0.13.1"}]}],"versions":["0.13.0"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.12.0"},{"fixed":"0.12.1"}]}],"versions":["0.12.0"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.11.0"},{"fixed":"0.11.1"}]}],"versions":["0.11.0"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.10.1"},{"fixed":"0.10.2"}]}],"versions":["0.10.1"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.9.0"},{"fixed":"0.9.1"}]}],"versions":["0.9.0"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.8.0"},{"fixed":"0.8.1"}]}],"versions":["0.8.0"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.7.0"},{"fixed":"0.7.1"}]}],"versions":["0.7.0"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.6.0"},{"fixed":"0.6.1"}]}],"versions":["0.6.0"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.5.2"},{"fixed":"0.5.3"}]}],"versions":["0.5.2"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.4.1"},{"fixed":"0.4.2"}]}],"versions":["0.4.1"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.3.0"},{"fixed":"0.3.1"}]}],"versions":["0.3.0"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.2.0"},{"fixed":"0.2.1"}]}],"versions":["0.2.0"]},{"source":"osv","ecosystem":"crates.io","package":"aws-sigv4","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.2.1"},{"introduced":"0.3.0-0"},{"fixed":"0.3.1"},{"introduced":"0.4.0-0"},{"fixed":"0.5.3"},{"introduced":"0.6.0-0"},{"fixed":"0.6.1"},{"introduced":"0.7.0-0"},{"fixed":"0.7.1"},{"introduced":"0.8.0-0"},{"fixed":"0.8.1"},{"introduced":"0.9.0-0"},{"fixed":"0.9.1"},{"introduced":"0.10.0-0"},{"fixed":"0.10.2"},{"introduced":"0.11.0-0"},{"fixed":"0.11.1"},{"introduced":"0.12.0-0"},{"fixed":"0.12.1"},{"introduced":"0.13.0-0"},{"fixed":"0.13.1"},{"introduced":"0.14.0-0"},{"fixed":"0.14.1"},{"introduced":"0.15.0-0"},{"fixed":"0.15.1"},{"introduced":"0.16.0-0"},{"fixed":"0.46.1"},{"introduced":"0.47.0-0"},{"fixed":"0.47.1"},{"introduced":"0.48.0-0"},{"fixed":"0.48.1"},{"introduced":"0.49.0-0"},{"fixed":"0.49.1"},{"introduced":"0.50.0-0"},{"fixed":"0.50.1"},{"introduced":"0.51.0-0"},{"fixed":"0.51.1"},{"introduced":"0.52.0-0"},{"fixed":"0.52.1"},{"introduced":"0.53.0-0"},{"fixed":"0.53.2"},{"introduced":"0.54.0-0"},{"fixed":"0.54.2"},{"introduced":"0.55.0-0"},{"fixed":"0.55.1"}]}]}],"products":[{"vendor":"amazon","product":"aws-sigv4"},{"vendor":"awslabs","product":"aws-sdk-rust"}],"references":[{"url":"https://github.com/awslabs/aws-sdk-rust/security/advisories/GHSA-mjv9-vp6w-3rc9","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-30610","tags":["advisory"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2023-0125.html","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-mjv9-vp6w-3rc9"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/30xxx/CVE-2023-30610.json","tags":["advisory"]},{"url":"https://github.com/awslabs/aws-sdk-rust","tags":["package"]},{"url":"https://crates.io/crates/aws-sigv4","tags":["package"]},{"url":"https://github.com/smithy-lang/smithy-rs/pull/2562","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-30610","title":"AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending","description":"aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The `aws_sigv4::SigningParams` struct had a derived `Debug` implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is enabled for an SDK, `SigningParams` is printed, thereby revealing those credentials to anyone with access to logs. All users of the AWS SDK for Rust who enabled TRACE-level logging, either globally (e.g. `RUST_LOG=trace`), or for the `aws-sigv4` crate specifically are affected. This issue has been addressed in a set of new releases. Users are advised to upgrade. Users unable to upgrade should disable TRACE-level logging for AWS Rust SDK crates.\n","status":"published","published":"2023-04-19T17:18:54.703Z","modified":"2025-02-05T14:56:14.27Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-532","CWE-532"],"updated_at":"2026-11-02T14:35:22.309324Z"}],"euvd":[{"id":"EUVD-2023-1355","description":"aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The `aws_sigv4::SigningParams` struct had a derived `Debug` implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is enabled for an SDK, `SigningParams` is printed, thereby revealing those credentials to anyone with access to logs. All users of the AWS SDK for Rust who enabled TRACE-level logging, either globally (e.g. `RUST_LOG=trace`), or for the `aws-sigv4` crate specifically are affected. This issue has been addressed in a set of new releases. Users are advised to upgrade. Users unable to upgrade should disable TRACE-level logging for AWS Rust SDK crates.\n","status":"published","published":"2023-04-19T17:18:54Z","modified":"2025-02-05T14:56:14Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:05.565654Z"}],"ghsa":[{"id":"GHSA-mjv9-vp6w-3rc9","title":"AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending","description":"The `aws_sigv4::SigningParams` struct had a derived `Debug` implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is enabled for an SDK, `SigningParams` is printed, thereby revealing those credentials to anyone with access to logs.\n\n### Impact\nAll users of the AWS SDK for Rust who enabled TRACE-level logging, either globally (e.g. `RUST_LOG=trace`), or for the `aws-sigv4` crate specifically.\n\n### Patches\n- Versions \u003e= `0.55.1`\n- `0.54.2`\n- `0.53.2`\n- `0.52.1`\n- `0.51.1`\n- `0.50.1`\n- `0.49.1`\n- `0.48.1`\n- `0.47.1`\n- `0.46.1`\n- `0.15.1`\n- `0.14.1`\n- `0.13.1`\n- `0.12.1`\n- `0.11.1`\n- `0.10.2`\n- `0.9.1`\n- `0.8.1`\n- `0.7.1`\n- `0.6.1`\n- `0.5.3`\n- `0.3.1`\n- `0.2.1`\n\n### Workarounds\nDisable TRACE-level logging for AWS Rust SDK crates.","status":"published","published":"2023-04-26T16:01:10Z","modified":"2026-04-06T17:17:05Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:39:48.966685Z"}],"nvd":[{"id":"CVE-2023-30610","description":"aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The `aws_sigv4::SigningParams` struct had a derived `Debug` implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is enabled for an SDK, `SigningParams` is printed, thereby revealing those credentials to anyone with access to logs. All users of the AWS SDK for Rust who enabled TRACE-level logging, either globally (e.g. `RUST_LOG=trace`), or for the `aws-sigv4` crate specifically are affected. This issue has been addressed in a set of new releases. Users are advised to upgrade. Users unable to upgrade should disable TRACE-level logging for AWS Rust SDK crates.\n","status":"published","published":"2023-04-19T18:15:07.417Z","modified":"2026-06-17T05:55:07.997Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:07:56.683259Z"}],"osv":[{"id":"CVE-2023-30610","title":"AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending","description":"aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The `aws_sigv4::SigningParams` struct had a derived `Debug` implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is enabled for an SDK, `SigningParams` is printed, thereby revealing those credentials to anyone with access to logs. All users of the AWS SDK for Rust who enabled TRACE-level logging, either globally (e.g. `RUST_LOG=trace`), or for the `aws-sigv4` crate specifically are affected. This issue has been addressed in a set of new releases. Users are advised to upgrade. Users unable to upgrade should disable TRACE-level logging for AWS Rust SDK crates.\n","status":"published","published":"2023-04-19T17:18:54.703Z","modified":"2026-10-28T02:30:53.787970366Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T15:44:31.790231Z"},{"id":"GHSA-mjv9-vp6w-3rc9","title":"AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending","description":"The `aws_sigv4::SigningParams` struct had a derived `Debug` implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is enabled for an SDK, `SigningParams` is printed, thereby revealing those credentials to anyone with access to logs.\n\n### Impact\nAll users of the AWS SDK for Rust who enabled TRACE-level logging, either globally (e.g. `RUST_LOG=trace`), or for the `aws-sigv4` crate specifically.\n\n### Patches\n- Versions \u003e= `0.55.1`\n- `0.54.2`\n- `0.53.2`\n- `0.52.1`\n- `0.51.1`\n- `0.50.1`\n- `0.49.1`\n- `0.48.1`\n- `0.47.1`\n- `0.46.1`\n- `0.15.1`\n- `0.14.1`\n- `0.13.1`\n- `0.12.1`\n- `0.11.1`\n- `0.10.2`\n- `0.9.1`\n- `0.8.1`\n- `0.7.1`\n- `0.6.1`\n- `0.5.3`\n- `0.3.1`\n- `0.2.1`\n\n### Workarounds\nDisable TRACE-level logging for AWS Rust SDK crates.","status":"published","published":"2023-04-26T16:01:10Z","modified":"2026-04-06T17:38:55.716713Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T15:46:51.811331Z"},{"id":"RUSTSEC-2023-0125","title":"Logs AWS credentials when TRACE-level logging is enabled","description":"aws-sigv4 is a rust library for low level request signing in the aws cloud platform.\n\nThe `aws_sigv4::SigningParams` struct had a derived `Debug` implementation.\nWhen debug-formatted, it would include a user's AWS access key, AWS secret key,\nand security token in plaintext. When TRACE-level logging is enabled for an SDK,\n`SigningParams` is printed, thereby revealing those credentials to anyone\nwith access to logs.\n\nAll users of the AWS SDK for Rust who enabled TRACE-level logging,\neither globally (e.g. `RUST_LOG=trace`), or for the `aws-sigv4`\ncrate specifically are affected.\n\nThis issue has been addressed in a set of new releases.\n\nUsers are advised to upgrade.\n\nUsers unable to upgrade should disable TRACE-level logging for AWS Rust SDK crates.","status":"published","published":"2023-04-19T12:00:00Z","modified":"2026-10-12T18:00:06.11128605Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:39.971022Z"}]}}