N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-rvjx-cfjh-5mc9

GHSA-rvjx-cfjh-5mc9: loggingredactor converts non-string types to string types in logs

Impact

Non-string types are converted into string types, leading to type errors in %d conversions.

Patches

The problem has been patched in version 0.0.6.

Workarounds

None without patching.

Resources

Issue report: https://github.com/armurox/loggingredactor/issues/7 Release: https://github.com/armurox/loggingredactor/releases/tag/0.0.6

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-rvjx-cfjh-5mc9

GHSA-rvjx-cfjh-5mc9:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
loggingredactor	pip	< 0.0.6	0.0.6

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the RedactingFilter.redact method within loggingredactor/redacting_filter.py. The analysis of the patch in commit 75ae0a094bcbb7b1806cca7eba652c785c463fa9 clearly shows the removal of a line that was responsible for incorrectly converting non-string data types to strings. Specifically, the line content_copy = isinstance(content_copy, str) and content_copy or str(content_copy) was removed. This line would take any value that wasn't a dictionary, list, or tuple and force it into a string representation. The vulnerability description confirms this, stating that "Non-string types are converted into string types, leading to type errors in %d conversions." The patch replaces this logic with a more specific check for strings (elif isinstance(content_copy, str):), ensuring that other data types are preserved, thus fixing the vulnerability. Therefore, the RedactingFilter.redact function is the identified vulnerable function.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-rvjx-cfjh-5mc9: loggingredactor converts non-string types to string types in logs

Impact

Patches

Workarounds

Resources

GHSA-rvjx-cfjh-5mc9:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

N/A

N/A

GHSA-rvjx-cfjh-5mc9: loggingredactor converts non-string types to string types in logs

Impact

Patches

Workarounds

Resources

Basic Information

Basic Information

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI