Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue.

CVE-2026-65945

Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0 Users are recommended to upgrade to version 2.9.0,

历史摘要 · 未重新核验 · NVD

A vulnerability was found in lmammino oidc-authorizer up to 0.4.0. Impacted is an unknown function of the file src/handler.rs of the component Lambda Authorizer. The manipulatio...

CVE-2026-19363

A vulnerability was found in lmammino oidc-authorizer up to 0.4.0. Impacted is an unknown function of the file src/handl

历史摘要 · 未重新核验 · NVD

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's inline auth functionality incorrectly redacted audit log entries, resulting...

CVE-2026-46358

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's inline auth functi

历史摘要 · 未重新核验 · NVD

When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties. This logging occurs without sufficient validation or...

CVE-2026-0637

When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these propert

历史摘要 · 未重新核验 · NVD

The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials.  Under certain very specific use cases and specific confi...

CVE-2026-21766

The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials.

历史摘要 · 未重新核验 · NVD

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability ...

CVE-2026-20289

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privilege

历史摘要 · 未重新核验 · NVD

The HTTP server component of ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions exposes an undocumented endpoint that changes the server's logging level and target wit...

CVE-2026-65311

The HTTP server component of ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions exposes an undocumented endpoi

历史摘要 · 未重新核验 · NVD

OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords

CVE-2026-54704

OpenTelemetry Java Instrumentation JDBC auto-instrumentation may fail to sanitize passwords in SQL CONNECT statements wh

历史摘要 · 未重新核验 · GitHub Advisory

IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain...

CVE-2026-14528

IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain sensitive information.

历史摘要 · 未重新核验 · GitHub Advisory

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0...

CVE-2026-1918

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM

历史摘要 · 未重新核验 · GitHub Advisory

IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain sensitive information.

CVE-2026-14528

IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain sensitive information.

历史摘要 · 未重新核验 · NVD

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 ...

CVE-2026-1918

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM

历史摘要 · 未重新核验 · NVD

Hubuum client library (Rust): Sensitive data may be exposed through default diagnostics

## Summary `hubuum_client` diagnostics can expose sensitive request, response, import/export, task, delivery, or server

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data

CVE-2026-65589

## Impact Custom HTTP headers configured in credentials for certain LLM sub-nodes (including OpenAI, Anthropic, and Lemo

历史摘要 · 未重新核验 · GitHub Advisory

n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing plaintext API keys and secrets to workflow execution re...

CVE-2026-65589

n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writin

来源摘录 · NVD

n8n before 1.123.64 Credential Exposure via LLM Node Execution Data

CVE-2026-65589

n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writin

历史摘要 · 未重新核验 · OSV.dev

Composer: URL-embedded HTTP-Basic username leaks to verbose logs (GitHub PAT exposure)

CVE-2026-59947

## Summary When Composer is run with -vvv (debug verbosity), it could print a credential that was embedded directly in

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the...

CVE-2026-62211

OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature t

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature that allows lower-trust callers to access data that should...

CVE-2026-62211

OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature t

历史摘要 · 未重新核验 · NVD

OpenClaw < 2026.6.1 Credential Redaction Bypass via Trajectory Export

CVE-2026-62211

OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature t

历史摘要 · 未重新核验 · OSV.dev