loggingredactor converts non-string types to string types in logs

中 5.3CVE-2026-22041 · GHSA-rvjx-cfjh-5mc9 · PYSEC-2026-1582 · 08/01/2026 公開 · 17/06/2026 更新

要点

CVE-2026-22041 は loggingredactor, logging redactor (armurox) に影響する深刻度「中」 (CVSS 5.3) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.27%（全脆弱性の 19.6% より高い）。
対処：0.0.6 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
loggingredactor PyPI	`< 0.0.6`	`0.0.6`
logging redactor armurox	`< 0.0.6`	`0.0.6`

概要

Impact

Non-string types are converted into string types, leading to type errors in %d conversions.

Patches

The problem has been patched in version 0.0.6.

Workarounds

None without patching.

Resources

Issue report: https://github.com/armurox/loggingredactor/issues/7 Release: https://github.com/armurox/loggingredactor/releases/tag/0.0.6

NVD の説明

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No known workarounds are available.