GitHub Advisoryadvisory · PyPI
GHSA-rvjx-cfjh-5mc9 loggingredactor converts non-string types to string types in logs
LOW
Official page ↗
- Aliases
- CVE-2026-22041
- Ecosystem
- PyPI
- Packages
- loggingredactor
- Severity
- Low
- CVSS vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
- Weaknesses
- CWE-704
- Reviewed
- 2026-01-07
Affected packages
• PyPI loggingredactor: < 0.0.6 → fixed in 0.0.6
Description
Impact
Non-string types are converted into string types, leading to type errors in %d conversions.
Patches
The problem has been patched in version 0.0.6.
Workarounds
None without patching.
Resources
Issue report: https://github.com/armurox/loggingredactor/issues/7
Release: https://github.com/armurox/loggingredactor/releases/tag/0.0.6
Related
Alias · CVE (1)
- CVE-2026-22041 Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. vulnerability
Weakness · CWE (1)
- CWE-704 Incorrect Type Conversion or Cast weakness
References
- https://github.com/armurox/loggingredactor/security/advisories/GHSA-rvjx-cfjh-5mc9 web
- https://nvd.nist.gov/vuln/detail/CVE-2026-22041 advisory
- https://github.com/armurox/loggingredactor/issues/7 web
- https://github.com/armurox/loggingredactor package
- https://github.com/armurox/loggingredactor/releases/tag/0.0.6 web