https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:45:01 +0000 https://cve.radiocsirt.org/vuln/cve-2026-81715 <p><strong>Affected:</strong> jahlives openssl_encrypt</p> <p>openssl_encrypt (pip package openssl-encrypt) versions &lt;= 1.4.8 do not redact the keyserver bearer token passed as the positional argument to &#39;keyserver set-token&#39; in the --debug argv dump, because sanitize_argv_for_debug fails to sanitize it. As a result the token is printed in cleartext to stderr under --debug (even without --unsafe-show-secrets), persisting the credential in logs and terminal history. Fixed in 1.4.9.</p> <p><strong>Affected:</strong> jahlives openssl_encrypt</p> <p>openssl_encrypt (pip package openssl-encrypt) versions &lt;= 1.4.8 do not redact the keyserver bearer token passed as the positional argument to &#39;keyserver set-token&#39; in the --debug argv dump, because sanitize_argv_for_debug fails to sanitize it. As a result the token is printed in cleartext to stderr under --debug (even without --unsafe-show-secrets), persisting the credential in logs and terminal history. Fixed in 1.4.9.</p> https://cve.radiocsirt.org/vuln/cve-2026-81715