CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer

Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`

Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`

Microsoft Security Advisory CVE-2026-62900 – .NET Information Disclosure Vulnerability

OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties

Guzzle: URI fragments disclosed in redirect Referer headers

Forwarding of confidentials headers to third parties in fluture-node

nebula-mesh: CA private key not zeroized on web mobile-bundle error paths

Gryph Agents Payload Filter Fails to Strip Tool Payload for Sensitive Content

Weblate leaks the IP of project member inviting user to be reviewer in Audit log

CBORDecoder reuse can leak shareable values across decode calls

URI Credential Leakage Bypass over CVE-2025-27221

FacturaScripts Vulnerable to Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download

Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations

OpenBao's Namespace Deletion May Not Delete Data Properly

ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction

OpenClaw: config.get redaction bypass through sourceConfig and runtimeConfig aliases

OpenClaw: SSH-based sandbox backends pass unsanitized process.env to child processes

Trino: Iceberg REST catalog static and vended credentials are accessible via query JSON

OpenClaw Exposes Credentials Embedded in baseUrl Fields via config.get and channels.status

Grype has a credential disclosure vulnerability in its JSON output

URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+

Ansible does not collect garbage after playbook run

m00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected Credentials

Shopware exposes sensitive user information via CSV export mapping

XWiki PDF export jobs store sensitive cookies unencrypted in job statuses