CVE-2022-39292

HIGH

slack-morphism-hyper (=0.26.0) potentially affected by CVE-2022-31162 +1 more via slack-morphism (=0.26.0)

Details

CVSS v3: 7.5
NVD published: 2022-10-10 15:15:09
EPSS: 0.4% probability · 60.1th percentile — 2026-04-05
Affected versions: cpe:2.3:a:slack_morphism_project:slack_morphism:*:*:*:*:*:rust:*:*
Summary: Slack Morphism is a modern client library for Slack Web/Events API/Socket Mode and Block Kit. Debug logs expose sensitive URLs for Slack webhooks that contain private information. The problem is fixed in version 1.3.2 which redacts sensitive URLs for webhooks. As a workaround, people who use Slack webhooks may disable or filter debug logs.
Remediation: Not available in our cache.
Exploit info: Not available in our cache.

TopVuln sends digest emails with high-risk CVE picks across multiple authoritative sources—curated with EPSS and AI. Choose daily per-stream emails and optional weekly or monthly roundups.

Subscribe — free email digest or paid plan

Information is aggregated from multiple authoritative sources for convenience; verify with NVD and vendors before operational decisions.