https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:07:16.684634+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-81715 CVE-2026-81715 — openssl_encrypt before 1.4.9 Credential Exposure via Debug Output 2026-10-03T20:07:16.700777+00:00

Affected: jahlives openssl_encrypt

openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 do not redact the keyserver bearer token passed as the positional argument to 'keyserver set-token' in the --debug argv dump, because sanitize_argv_for_debug fails to sanitize it. As a result the token is printed in cleartext to stderr under --debug (even without --unsafe-show-secrets), persisting the credential in logs and terminal history. Fixed in 1.4.9.