CVE-2022-31162

Slack Morphism is an async client library for Rust. Prior to 0.41.0, it was possible for Slack OAuth client information to leak in application debug logs. Stricter and more secure debug formatting was introduced in v0.41.0 for OAuth secret types to reduce the possibility of printing sensitive information in application logs. As a workaround, do not print/output requests and responses for OAuth and client configurations in logs.

• CWE-200
• CWE-1258
• CWE-212

• https://github.com/abdolence/slack-morphism-rust/releases/tag/v0.41.0Release Notes, Third Party Advisory
• https://github.com/abdolence/slack-morphism-rust/security/advisories/GHSA-99j7-mhfh-w84pThird Party Advisory
• https://github.com/abdolence/slack-morphism-rust/releases/tag/v0.41.0Release Notes, Third Party Advisory
• https://github.com/abdolence/slack-morphism-rust/security/advisories/GHSA-99j7-mhfh-w84pThird Party Advisory

Published

Jul 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-31157LTI 1.3 Tool Library is a library used for building IMS-cert…7.5
• CVE-2022-31158LTI 1.3 Tool Library is a library used for building IMS-cert…7.5
• CVE-2022-31159The AWS SDK for Java enables Java developers to work with Am…6.5
• CVE-2022-3116The Heimdal Software Kerberos 5 implementation is vulnerable…7.5
• CVE-2022-31160jQuery UI is a curated set of user interface interactions, e…6.1
• CVE-2022-31161Roxy-WI is a Web interface for managing HAProxy, Nginx and K…9.8
• CVE-2022-31163TZInfo is a Ruby library that provides access to time zone d…8.1
• CVE-2022-31164Tovy is a a staff management system for Roblox groups. A vul…7.5
• CVE-2022-31166XWiki Platform Old Core is a core package for XWiki Platform…8.8
• CVE-2022-31167XWiki Platform Security Parent POM contains the security API…6.5
• CVE-2022-31168Zulip is an open source team chat tool. Due to an incorrect …8.8
• CVE-2022-31169Wasmtime is a standalone runtime for WebAssembly. There is a…7.5