Data Exposure Vulnerability in Logging Redactor Python Library by Armurox
CVE-2026-63417

8.2HIGH

Key Information:

Vendor

Armurox

Status
Loggingredactor
Vendor
CVE Published:
3 November 2026

What is CVE-2026-63417?

The Logging Redactor Python library, designed to redact sensitive data in logs, contains a vulnerability where personally identifiable information (PII) from custom object str or repr methods is not adequately redacted when logged. This flaw allows sensitive information to be exposed in log files, undermining the library's purpose. Version 0.0.7 addresses this issue, providing necessary fixes to enhance data privacy and security.

Affected Version(s)

loggingredactor < 0.0.7

References

https://github.com/armurox/loggingredactor/security/advis...
x_refsource_CONFIRM
https://github.com/armurox/loggingredactor/issues/12
x_refsource_MISC
https://github.com/armurox/loggingredactor/pull/15
x_refsource_MISC

CVSS V4

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.