WS-2026-0080

The OpenBao SDK github.com/openbao/openbao/sdk/v2 before v2.6.3 / v2.7.1: the framework field parser getPrimitive for TypeKVPair and TypeHeader fields copied the raw invalid submitted value into its error message. Because error messages reach the audit log without HMAC redaction, sensitive values...