DigitalOcean recently changed the default API behavior from scrub to non-scrub when destroying a VM. Libcloud does not explicitly send "scrub_data" query parameter when destroying a node. This means nodes which are destroyed using Libcloud are vulnerable to later customers stealing data contained on them. Apache Libcloud versions 0.12.3 to 0.13.3 are affected.
7ee7d837555a3d2f63662a99781fc8f93154c247d4fbde017f7738f169e6a684