CWE-532 Insertion of Sensitive Information into Log File

Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`

Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`

Backstage: Secret-derived values may be exposed in scaffolder task logs

Backstage may expose sensitive information in Scaffolder task failure events

Backstage has sensitive information exposure in scaffolder task logs

Snowflake drivers writes sensitive information to logs

Duplicate Advisory: Sensitive information written to logs by Snowflake drivers

Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute

Quart leaks raw request body (incl. plaintext passwords) to stdout via stray debug print in Body.__await__

Apache Airflow bulk endpoints log Variable and Connection secrets in cleartext

Trigger.dev: Trigger CLI debug deployment logs expose resolved environment secret values

Elasticsearch: Insertion of Sensitive Information into Log File via reindex API

foreman-mcp-server Inserts Sensitive Information into Log File

OpenBao Agent Writes Secrets to Stdout

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Jupyter Server: 5xx request logging leaks token-bearing Referer header values

free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

netty-incubator-codec-ohttp: BoringSSL HPKE private key bytes exposed through toString() and exception messages

SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses

GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)

hashi-vault-js: Vault token and secret values exposed in thrown errors

Apache Tomcat vulnerable to Insertion of Sensitive Information into Log File

OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords

Hubuum client library (Rust): Sensitive data may be exposed through default diagnostics

n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data