← All advisories

Moderate severityNVD Advisory· Published Jan 25, 2022· Updated Aug 2, 2024

Insertion of Sensitive Information into Log File in delgan/loguru

CVE-2022-0338

Description

Insertion of Sensitive Information into Log File in Conda loguru prior to 0.5.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
loguruPyPI	< 0.5.3	0.5.3

Affected products

2

ghsa-coords
pkg:pypi/loguru
Range: < 0.5.3
delgan/delgan/loguruv5
Range: unspecified

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-39ph-wr67-j4xqghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-0338ghsaADVISORY
github.com/delgan/loguru/commit/ea39375e62f9b8f18e2ca798a5c0fb8c972b7eaaghsax_refsource_MISCWEB
github.com/pypa/advisory-database/tree/main/vulns/loguru/PYSEC-2022-14.yamlghsaWEB
huntr.dev/bounties/359bea50-2bc6-426a-b2f9-175d401b1ed0ghsax_refsource_CONFIRMWEB

News mentions

0

No linked articles in our index yet.