CVE-2026-63417
Logging Redactor: PII data in str/repr of non primitive objects was not being redacted
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to 0.0.7, personally identifiable information returned by custom object __str__ or __repr__ methods is not redacted when such non-primitive objects are logged, causing sensitive values to appear in logs that are expected to mask them. This issue is fixed in version 0.0.7.
| CWE | CWE-532 |
| Vendor | armurox |
| Product | loggingredactor |
| Published | Nov 3, 2026 |
Stay Ahead of the Next One
Get instant alerts for armurox loggingredactor
Be the first to know when new unknown vulnerabilities affecting armurox loggingredactor are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
armurox / loggingredactor
< 0.0.7
References
github.com: https://github.com/armurox/loggingredactor/security/advisories/GHSA-w7qv-268h-9h3f github.com: https://github.com/armurox/loggingredactor/issues/12 github.com: https://github.com/armurox/loggingredactor/pull/15 github.com: https://github.com/armurox/loggingredactor/commit/361a528e56437b9c269e69f3863de4b3e568391b github.com: https://github.com/armurox/loggingredactor/releases/tag/0.0.7