CVE-2026-22041

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No known workarounds are available.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-704

Affected software

Vendor	Product	Versions
armurox	loggingredactor	< 0.0.6

References

https://github.com/armurox/loggingredactor/issues/7Exploit, Issue Tracking
https://github.com/armurox/loggingredactor/releases/tag/0.0.6Release Notes
https://github.com/armurox/loggingredactor/security/advisories/GHSA-rvjx-cfjh-5mc9Vendor Advisory
https://github.com/armurox/loggingredactor/issues/7Exploit, Issue Tracking

Timeline

Published: Jan 8, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-220428.8RustFS is a distributed object storage system built in Rust. Prior to version 1.0.0-alpha.79, he `ImportIam` admin API validates permissions CVE-2026-220439.8RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 through 1.0.0-alpha.78, a flawed `deny_only` short-c CVE-2026-220448.8GLPI is a free asset and IT management software package. From version 0.85 to before 10.0.23, an authenticated user can perform a SQL inject CVE-2026-220457.5Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.35 and 3.6.7, there is a potential vulnerability in Traefik ACME TLS certi CVE-2026-220468.8iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium CVE-2026-220478.8iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium CVE-2026-220487.1StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Micro CVE-2026-220498.8ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to th CVE-2026-22054.3A vulnerability was identified in WeKan up to 8.20. This affects an unknown part of the file server/publications/cards.js of the component M CVE-2026-220504.3ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which CVE-2026-220514.3StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerabili CVE-2026-220524.3ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could al