Skip to main content

Loggingredactor

1 CVEs product

Monthly

CVE-2026-63417 Nov 03, 18:21 HIGH PATCH This Week

PII exposure in loggingredactor before 0.0.7 allows sensitive values returned by custom __str__ or __repr__ methods to appear unmasked in logs that are expected to redact them. This affects Python applications that use the library's logging filter and that log non-primitive/custom objects whose string representations contain PII; a party able to read the resulting logs can obtain the exposed data. Vendor-released patch: 0.0.7; no public exploit identified at time of analysis.

Python Information Disclosure Loggingredactor
NVD GitHub
CVSS 4.0
8.2
CVSS 8.2
HIGH PATCH This Week

PII exposure in loggingredactor before 0.0.7 allows sensitive values returned by custom __str__ or __repr__ methods to appear unmasked in logs that are expected to redact them. This affects Python applications that use the library's logging filter and that log non-primitive/custom objects whose string representations contain PII; a party able to read the resulting logs can obtain the exposed data. Vendor-released patch: 0.0.7; no public exploit identified at time of analysis.

Python Information Disclosure Loggingredactor
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy