agent-sweep

AgentSweep Find and redact secrets in your AI coding agent's local history. Fully offline. Watch the full clip with sound Prevention: Don't paste API keys into cloud-backed AI agents at all. The key transits the provider's servers before it ever hits your disk. If you already did: agentsweep...

CLSA-2026-1790852342 squid: Fix of 4 CVEs

Bump release to sort above Oracle Linux 7 squid-3.5.20-17.0.11.el79.13 - CVE-2025-62168: complete fix: also redact credentials in the %W mailto body, from Oracle 17.0.9 - Deny URN requests in the default squid.conf upstream workaround, from Oracle 17.0.7...

CLSA-2026-1790851347 squid: Fix of 5 CVEs

Bump release to sort above Oracle Linux 7 squid-3.5.20-17.0.11.el79.13 - CVE-2025-62168: complete fix: also redact credentials in the %W mailto body, from Oracle 17.0.9 - Deny URN requests in the default squid.conf upstream workaround, from Oracle 17.0.7...

CLSA-2026-1790775234 squid: Fix of CVE-2025-62168

Bump release to sort above Oracle Linux 7 squid-3.5.20-17.0.11.el79.13 - CVE-2025-62168: complete fix: also redact credentials in the %W mailto body, from Oracle 17.0.9 - Deny URN requests in the default squid.conf upstream workaround, from Oracle 17.0.7...

redact v0.2.2

redact Strip credential-like content from free-form strings before they reach logs, telemetry, or any third-party surface Part of thephpboyscout Go toolkit — small, framework-free Go modules extracted from go-tool-base. Docs: redact.go.phpboyscout.uk gitlab.com/phpboyscout/go/redact redacts...

CVE-2026-73604

Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET /api/v1/credentials/:id endpoint that returns decrypted secrets in plaintext. Authenticated users with credentials:view permission can retrieve sensitive data including database connection URLs with embedded...

EUVD-2026-57808

Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET /api/v1/credentials/:id endpoint that returns decrypted secrets in plaintext. Authenticated users with credentials:view permission can retrieve sensitive data including database connection URLs with embedded...

CVE-2026-19391 Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archives

A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows SSSD LDAP bind passwords ldapdefaultauthtok and Pacemaker fence device credentials to be included in cleartext in archives uploaded to...

NPM: Flowise: Incomplete Credential Redaction Exposes Secrets via API

NPM: Flowise: Incomplete Credential Redaction Exposes Secrets via API vulnerability discovered by ? in WordPress Npm flowise versions = 3.1.2...

Flowise: Incomplete Credential Redaction Exposes Secrets via API

Summary The GET /api/v1/credentials/:id endpoint decrypts stored credential data and returns it in the plainDataObj field of the API response. While a redactCredentialWithPasswordType function masks fields defined with type: 'password' in their component schema, many credential types store highly...

PT-2026-71432

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.3 Description An incomplete credential redaction issue exists where the 'GET /api/v1/credentials/:id' endpoint returns decrypted secrets in plaintext. Authenticated users possessing the credentials:view permission...

Sensitive Information Exposure

OpenClaw is vulnerable to Sensitive Information Exposure. The vulnerability is due to insufficient enforcement of credential redaction during trajectory exports, where lower-trust callers can exploit misconfigured input paths or feature access to expose sensitive credentials and other protected...

CVE-2026-62211

OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature that allows lower-trust callers to access data that should remain within trusted boundaries. Attackers can exploit misconfigured input paths or feature accessibility to expose...

CVE-2026-62211 OpenClaw < 2026.6.1 Credential Redaction Bypass via Trajectory Export

OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature that allows lower-trust callers to access data that should remain within trusted boundaries. Attackers can exploit misconfigured input paths or feature accessibility to expose...

EUVD-2026-45099

OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature that allows lower-trust callers to access data that should remain within trusted boundaries. Attackers can exploit misconfigured input paths or feature accessibility to expose...

CVE-2026-62211

OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature that allows lower-trust callers to access data that should remain within trusted boundaries. Attackers can exploit misconfigured input paths or feature accessibility to expose...

CVE-2026-62211

OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature that allows lower-trust callers to access data that should remain within trusted boundaries. Attackers can exploit misconfigured input paths or feature accessibility to expose...

CVE-2026-62211 OpenClaw < 2026.6.1 Credential Redaction Bypass via Trajectory Export

OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature that allows lower-trust callers to access data that should remain within trusted boundaries. Attackers can exploit misconfigured input paths or feature accessibility to expose...

CVE-2026-62211

OpenClaw versions prior to 2026.6.1 expose a credential redaction bypass in the trajectory export feature. The flaw allows lower-trust callers to access data that should remain within trusted boundaries by exploiting misconfigured input paths or feature accessibility in the export mechanism. Affe...

CVE-2026-62211: Insertion of Sensitive Information into Log File

OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature that allows lower-trust callers to access data that should remain within trusted boundaries. Attackers can exploit misconfigured input paths or feature accessibility to expose...