Description
Insertion of Sensitive Information into Log File in Conda loguru prior to 0.5.3.
References (2)
Core 2
Core References
Exploit, Patch, Third Party Advisory x_refsource_confirm
https://huntr.dev/bounties/359bea50-2bc6-426a-b2f9-175d401b1ed0
Patch, Third Party Advisory x_refsource_misc
https://github.com/delgan/loguru/commit/ea39375e62f9b8f18e2ca798a5c0fb8c972b7eaa
Scores
CVSS v3
4.3
EPSS
0.0019
EPSS Percentile
40.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Details
CWE
CWE-732
CWE-532
Status
published
Products (2)
loguru_project/loguru
< 0.5.3
pypi/loguru
0 - 0.5.3PyPI
Published
Jan 25, 2022
Tracked Since
Feb 18, 2026