Live › vulnerability › CVE-2026-63417
Logging Redactor is a Python library meant to mask sensitive data in logs. Before version 0.0.7, personal data returned by custom __str__ or __repr__ methods on objects was not redacted when those objects were logged, so the values appear in plain text in log files.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 19:44 UTC. All times on this page are UTC.
Teams that use the Logging Redactor Python library to mask sensitive values in logs and log objects whose str or repr output includes personal data. Applications that do not use this library, or that never log such objects, are not exposed by this flaw. The sources do not say which exact code paths or configurations are required to trigger it.
No product ranges from the sources yet.
pip show logging-redactor (package name as listed in the sources; confirm the exact name in your environment).0.0.7.0.0.7 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to 0.0.7, personally identifiable information returned by custom object str or repr methods is not redacted when such non-primitive objects are logged, causing sensitive values to appear in logs that are expected to mask them. This issue is fixed in version 0.0.7.
This page as .md · .json · in your agent: get_signal("CVE-2026-63417")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.