Lucene search
+L

91 matches found

RedhatCVE
RedhatCVE
•added 2026/01/10 5:41 a.m.•12 views

CVE-2026-22041

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No...

5.3CVSS5.8AI score0.00271EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/01/08 2:52 p.m.•4 views

CVE-2026-22041 loggingredactor converts non-string types to string types in logs

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No...

5.1CVSS5.8AI score0.00271EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/01/08 2:52 p.m.•54 views

CVE-2026-22041 loggingredactor converts non-string types to string types in logs

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No...

5.1CVSS0.00271EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/01/08 2:52 p.m.•16 views

EUVD-2026-1160

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No...

5.1CVSS5.8AI score0.00271EPSS
SaveExploits1References4
CVE
CVE
•added 2026/01/08 2:52 p.m.•40 views

CVE-2026-22041

CVE-2026-22041 affects the Python library Logging Redactor. Prior to version 0.0.6, non-string data are coerced to strings, causing type errors in %d formatting. The issue is fixed in 0.0.6; multiple sources corroborate this patch. No exploit details are provided in the documents. Remediation: up...

5.3CVSS5.8AI score0.00271EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2026/01/08 2:52 p.m.•15 views

CVE-2026-22041 loggingredactor converts non-string types to string types in logs

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No...

5.1CVSS6.5AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/08 12:00 a.m.•4 views

CVE-2026-22041: Incorrect Type Conversion or Cast

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No...

5.3CVSS5.8AI score0.00271EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2026/01/07 7:28 p.m.•28 views

loggingredactor converts non-string types to string types in logs

Impact Non-string types are converted into string types, leading to type errors in %d conversions. Patches The problem has been patched in version 0.0.6. Workarounds None without patching. Resources Issue report: https://github.com/armurox/loggingredactor/issues/7 Release:...

5.3CVSS5.7AI score0.00271EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2026/01/07 7:28 p.m.•19 views

GHSA-RVJX-CFJH-5MC9 loggingredactor converts non-string types to string types in logs

Impact Non-string types are converted into string types, leading to type errors in %d conversions. Patches The problem has been patched in version 0.0.6. Workarounds None without patching. Resources Issue report: https://github.com/armurox/loggingredactor/issues/7 Release:...

5.1CVSS5.7AI score0.00271EPSS
SaveExploits1References5
OSV
OSV
•added 2025/11/14 11:09 a.m.•17 views

OESA-2025-2686 python-ldap security update

python-ldap: python-ldap provides an object-oriented API to access LDAP directory servers from Python programs. Mainly it wraps the OpenLDAP 2.x libs for that purpose. Additionally the package contains modules for other LDAP-related stuff e.g. processing LDIF, LDAPURLs, LDAPv3 schema, LDAPv3...

6.5CVSS6.2AI score0.00458EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2025/10/10 10:02 p.m.•38 views

CVE-2025-61911 python-ldap has sanitization bypass in ldap.filter.escape_filter_chars

python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, the sanitization method ldap.filter.escapefilterchars can be tricked to skip escaping of special characters when a crafted list or dict is supplied as the assertionvalue parameter, and t...

6.9CVSS0.00322EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/10 10:02 p.m.•13 views

EUVD-2025-33797

python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, the sanitization method ldap.filter.escapefilterchars can be tricked to skip escaping of special characters when a crafted list or dict is supplied as the assertionvalue parameter, and t...

6.9CVSS6.6AI score0.00322EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2025/10/10 10:02 p.m.•31 views

CVE-2025-61911

python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, the sanitization method ldap.filter.escapefilterchars can be tricked to skip escaping of special characters when a crafted list or dict is supplied as the assertionvalue parameter, and t...

6.9CVSS6.6AI score0.00322EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2025/10/10 10:02 p.m.•14 views

CVE-2025-61911

python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, the sanitization method ldap.filter.escapefilterchars can be tricked to skip escaping of special characters when a crafted list or dict is supplied as the assertionvalue parameter, and t...

6.9CVSS6.6AI score0.00322EPSS
SaveExploits1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•27 views

EUVD-2024-2720

Malicious code in bioql PyPI...

6.5CVSS7.3AI score0.00577EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2022-5914

Malicious code in bioql PyPI...

7.5CVSS7.1AI score0.01212EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/03/20 10:09 a.m.•8 views

Improper Handling of Exceptional Conditions

Overview llama-index-core is an Interface between LLMs and your data Affected versions of this package are vulnerable to Improper Handling of Exceptional Conditions via the streamcomplete method of the LangChainLLM class. An attacker can disrupt service availability by providing an input of type...

8.7CVSS7AI score0.00831EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2025/02/14 4:25 a.m.•10 views

SUSE CVE-2024-47003

Mattermost versions 9.11.x = 9.11.0 and 9.5.x = 9.5.8 fail to validate that the message of the permalink post is a string, which allows an attacker to send a non-string value as the message of a permalink post and crash the frontend...

6.5CVSS7.9AI score0.00577EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/01/16 6:18 p.m.•34 views

CVE-2025-20630 Mobile crash via object that can't be cast to String in Attachment Field

Mattermost Mobile versions =2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the mobile to crash via creating and sending such a post to a channel...

6.5CVSS0.00612EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/16 6:16 p.m.•12 views

CVE-2025-20621 Webapp crash via object that can't be cast to String in Attachment Field

Mattermost versions 10.2.x = 10.2.0, 9.11.x = 9.11.5, 10.0.x = 10.0.3, 10.1.x = 10.1.3 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the webapp to crash via creating and sending such a post to a channel...

6.5CVSS7AI score
SaveExploits0References3
Rows per page
Query Builder