Skip to content
OpenAdvisories
High · 8.2 CVE-2026-63417 EUVD-2026-116117GHSA-w7qv-268h-9h3f

Logging Redactor: PII data in str/repr of non primitive objects was not being redacted

Published Nov 3, 2026 · Updated Nov 9, 2026 · Assigned by GitHub_M

Description

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to 0.0.7, personally identifiable information returned by custom object __str__ or __repr__ methods is not redacted when such non-primitive objects are logged, causing sensitive values to appear in logs that are expected to mask them. This issue is fixed in version 0.0.7.

Affected products

VendorProductAffectedFixed
armurox loggingredactor < 0.0.7 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI loggingredactor < 0.0.7 0.0.7 GHSA-w7qv-268h-9h3f

References