Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-63417— Logging Redactor: PII data in str/repr of non primitive objects was not being redacted

Quick assessment

Affected
armurox loggingredactor
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Logging Redactor 是一个 Python 库，旨在根据正则表达式和/或字典键对日志中的敏感数据进行脱敏处理。在 0.0.7 版本之前，当记录非原始类型对象时，这些对象通过自定义 或 方法返回的个人身份信息不会被脱敏，导致本应被屏蔽的敏感值出现在日志中。该问题已在 0.0.7 版本中修复。

CVSS 8.2 · High

Possible ATT&CK Techniques 1 AI

T1070 · Indicator Removal

Affected Version Matrix 1

VendorProduct Version RangeStatus
armurox loggingredactor < 0.0.7 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-63417

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Logging Redactor: PII data in str/repr of non primitive objects was not being redacted
Source: CVE Program / CVE List V5
Vulnerability Description
Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to 0.0.7, personally identifiable information returned by custom object __str__ or __repr__ methods is not redacted when such non-primitive objects are logged, causing sensitive values to appear in logs that are expected to mask them. This issue is fixed in version 0.0.7.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过日志文件的信息暴露
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
armurox loggingredactor < 0.0.7 -

II. Public POCs for CVE-2026-63417

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-63417

请登录查看更多情报信息。

Other References for CVE-2026-63417 (5)

IV. Related Vulnerabilities

Same product: loggingredactor
Same vendor: armurox
Same weakness: CWE-532