PT-2024-40186 · Python · Python

Published

2024-03-15

·

Updated

2024-03-15

CVSS v3.1

3.7

Low

VectorAV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: Python versions prior to 0.4.*
Description: The issue affects users who do not want tracebacks included in their logs when errors occur in their code. If a user's code inadvertently includes sensitive information in a traceback and a malicious entity gains access to their log stream, it could create a problem.
Recommendations: For versions prior to 0.4., upgrade to version 0.4. to resolve the issue. As a temporary workaround, consider restricting access to log streams to minimize the risk of sensitive information disclosure.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

GHSA-879P-8GW4-MCPW

Affected Products

Python