GHSA-w7qv-268h-9h3fHigh
Logging Redactor: PII data in str/repr of non primitive objects was not being redacted
🔗 CVE IDs covered (1)
📋 Description
Impact
PII data in str/repr of non primitive objects was not being redacted, leading to leakage of PII in logs that should have been redacted for custom __str__ and __repr__ functions
Patches The problem has been patched in version 0.0.7.
Workarounds None without patching.
🎯 Affected products1
- pip/loggingredactor:< 0.0.7
🔗 References (7)
- https://github.com/armurox/loggingredactor/security/advisories/GHSA-w7qv-268h-9h3f
- https://nvd.nist.gov/vuln/detail/CVE-2026-63417
- https://github.com/armurox/loggingredactor/issues/12
- https://github.com/armurox/loggingredactor/pull/15
- https://github.com/armurox/loggingredactor/commit/361a528e56437b9c269e69f3863de4b3e568391b
- https://github.com/armurox/loggingredactor/releases/tag/0.0.7
- https://github.com/advisories/GHSA-w7qv-268h-9h3f