{"id":"CVE-2026-63417","aliases":["GHSA-w7qv-268h-9h3f"],"url":"https://o3.security/vulnerability/CVE-2026-63417","summary":"Logging Redactor: PII data in str/repr of non primitive objects was not being redacted","details":"Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to 0.0.7, personally identifiable information returned by custom object __str__ or __repr__ methods is not redacted when such non-primitive objects are logged, causing sensitive values to appear in logs that are expected to mask them. This issue is fixed in version 0.0.7.","published":"2026-11-03T18:21:15.773Z","modified":"2026-11-10T02:31:03.924047787Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"PyPI","name":"loggingredactor","fixedVersion":"0.0.7"}],"fix":{"url":"https://github.com/armurox/loggingredactor/commit/361a528e56437b9c269e69f3863de4b3e568391b","label":"armurox/loggingredactor@361a528"},"references":[{"type":"WEB","url":"https://github.com/armurox/loggingredactor/releases/tag/0.0.7"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63417.json"},{"type":"ADVISORY","url":"https://github.com/armurox/loggingredactor/security/advisories/GHSA-w7qv-268h-9h3f"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63417"},{"type":"REPORT","url":"https://github.com/armurox/loggingredactor/issues/12"},{"type":"FIX","url":"https://github.com/armurox/loggingredactor/commit/361a528e56437b9c269e69f3863de4b3e568391b"},{"type":"FIX","url":"https://github.com/armurox/loggingredactor/pull/15"},{"type":"PACKAGE","url":"https://github.com/armurox/loggingredactor"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-11-10T02:31:03.924047787Z"}}