Hacker News new | ask | show | jobs
RustFS hardcoded auth token CVE (9.8) (nvd.nist.gov)
4 points by xendo 160 days ago
2 comments

Fix (creation of the rustfs-credentials crate) smuggled in a fairly large panic fix PR https://github.com/rustfs/rustfs/pull/1291#:~:text=Fixes%20C... , "fix: Prevent panic in GetMetrics gRPC handler on invalid input"
Seems they have already removed

> RustFS is written in Rust, a memory-safe language, so it is 100% secure

From their docs.

https://github.com/rustfs/docs.rustfs.com/commit/cd1ece3c5f5...