CWE-212.

CallBackery versions before 0.62.0 for Perl send users their own password hash and the admin-only user note via getUserConfig

• CWE-212

Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs

• CWE-212

<0.23.46 || >=0.24.0-dev.1, <0.24.0-dev.2 · fixed in 0.23.46, 0.24.0-dev.2

OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configuration

• openbao
• CWE-212

follow-redirects array-form headers bypass cross-origin credential stripping

• Information disclosure
• CWE-212

>=1.16.0, <1.16.1 · fixed in 1.16.1

Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint

• nezha
• CWE-212

Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`

• Information disclosure
• CWE-212

>=0.3.4, <1.107.4 || >=2.0.0b1, <2.27.1 · fixed in 1.107.4, 2.27.1

Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`

• Information disclosure
• CWE-212

>=0.3.4, <1.107.6 || >=2.0.0b1, <2.44.0 · fixed in 1.107.6, 2.44.0

"Checked by" label in page history should not be shown if the underlying review log entry is suppressed"

• The Wikimedia Foundation Mediawiki - FlaggedRevs extension
• CWE-212

This Power System update is being released to address

• IBM PowerVM Hypervisor
• CWE-212

Canva: The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned…

• Canva
• CWE-212

HCL DevOps Deploy / HCL Launch is susceptible to an Improper Removal of Sensitive Information Before Storage or Transfer

• HCLSoftware HCL DevOps Deploy / HCL Launch
• CWE-212

Security Advisory 0178

• Arista Networks EOS
• CWE-212

Snipe-IT before 8.7.0 Attachment Deletion Reports Success While File Remains

• grokability snipe-it
• CWE-212

Microsoft Security Advisory CVE-2026-62900 – .NET Information Disclosure Vulnerability

• CWE-212

>=10.0.102, <10.0.111 || >=10.0.200, <=10.0.204 || >=10.0.300, <10.0.303 · fixed in 10.0.111, 10.0.303

Improper Redaction of Query Literals in MongoDB Server Query Statistics Serialization on Sharded Cluster Router

• MongoDB Server
• CWE-212

IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an information disclosure vulnerability

• UCD - IBM UrbanCode Deploy
• UCD - IBM DevOps Deploy
• CWE-212

Canva: The Canva Android App before 2.376.0 did not restrict the headers returned to an external…

• Canva
• CWE-212

AppArmor Base Profile Misconfiguration in snapd Permits Confined Snaps Unauthorized Access to Hashed Passwords via systemd-userdbd

• Canonical Ubuntu 26.04 LTS
• Canonical Ubuntu 24.04 LTS
• CWE-212

Kronosnet: kronosnet: encryption key exposure in memory after cryptographic configuration changes

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• CWE-212

Guzzle: URI fragments disclosed in redirect Referer headers

• Information disclosure
• CWE-212

<7.15.1 · fixed in 7.15.1

Keycloak-services: keycloak-services: authenticator config endpoint exposes raw recaptcha secrets to view-only admins

• Red Hat build of Keycloak 26.6
• Red Hat build of Keycloak 26.6.7
• Hard-coded credentials
• CWE-212

nebula-mesh: CA private key not zeroized on web mobile-bundle error paths

• CWE-212
• CWE-316

<0.3.8 · fixed in 0.3.8

OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties

• CWE-212

>=17.0.0, <29.0.6 || >=30.0.0, <32.0.2 || >=33.0.0, <35.0.2 || >=36.0.0, <37.0.1 · fixed in 29.0.6, 32.0.2, 35.0.2, 37.0.1

Bludit's persistent authentication tokens not revoked upon account disablement

• bludit
• Authentication bypass
• CWE-212

The factory reset functionality in GNCC GP5 v7.1.76 fails to clear sensitive cryptographic material in the JFFS2 configuration partition, possibly allowing attackers to recover and obtain sensitive u…

• CWE-212

Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations

• Information disclosure
• CWE-212

>=3.2.0, <3.2.12 || >=3.3.0-rc1, <3.3.10 || >=3.4.0-rc1, <3.4.2 · fixed in 3.2.12, 3.3.10, 3.4.2

Gryph Agents Payload Filter Fails to Strip Tool Payload for Sensitive Content

• CWE-212

<0.7.0 · fixed in 0.7.0

FacturaScripts Vulnerable to Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download

• Information disclosure
• CWE-212

<2026 · fixed in 2026

Phoenix Contact: Improper removal of sensitive information in MGUARD products

• PHOENIX CONTACT FL MGUARD 2102
• PHOENIX CONTACT FL MGUARD 2105
• CWE-212

ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction

• Information disclosure
• CWE-212

>=3.2.0, <3.2.11 || >=3.3.0, <3.3.9 · fixed in 3.2.11, 3.3.9

OpenBao's Namespace Deletion May Not Delete Data Properly

• CWE-212

<0.0.0-20260420173541-6d2e0506e2b4 · fixed in 0.0.0-20260420173541-6d2e0506e2b4

OpenClaw: config.get redaction bypass through sourceConfig and runtimeConfig aliases

• CWE-212

<2026.4.14 · fixed in 2026.4.14

Windows Recovery Environment Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• CWE-212

follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets

• Information disclosure
• CWE-212

<1.16.0 · fixed in 1.16.0

Global vanishing does not completely remove user email

• The Wikimedia Foundation Mediawiki - CentralAuth Extension
• CWE-212

OpenClaw: SSH-based sandbox backends pass unsanitized process.env to child processes

• CWE-212
• CWE-214

<2026.3.31 · fixed in 2026.3.31

Trino: Iceberg REST catalog static and vended credentials are accessible via query JSON

• Information disclosure
• CWE-212

>=439, <480 · fixed in 480

OpenClaw Exposes Credentials Embedded in baseUrl Fields via config.get and channels.status

• Information disclosure
• Hard-coded credentials

<2026.3.22 · fixed in 2026.3.22

Anchorr Privilege Escalation: Jellyseerr User → Anchorr Admin via Stored XSS

• openVESSL Anchorr
• Cross-site scripting (XSS)
• Weak cryptography or TLS

Improper Removal of Sensitive Information Before Storage or Transfer in GitLab

• GitLab
• CWE-212

Improper Removal of Sensitive Information Before Storage or Transfer in GitLab

• GitLab
• CWE-212

tfplan2md has Sensitive Value Exposure in Generated Reports

• oocx tfplan2md
• CWE-212

Qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-212

Coolify leaksensitive information `email_change_code` in `/api/v1/teams/{team_id | current}/members` API endpoint

• coollabsio coolify
• Information disclosure
• CWE-212

CBORDecoder reuse can leak shareable values across decode calls

• CWE-212

>=3.0.0, <5.8.0 · fixed in 5.8.0

URI Credential Leakage Bypass over CVE-2025-27221

• Information disclosure
• CWE-212

<0.12.5 || >=0.13.0, <0.13.3 || >=1.0.0, <1.0.4 · fixed in 0.12.5, 0.13.3, 1.0.4

Unintended temporary cached data included in a structure only copy intended to be empty of data

• M-Files Corporation M-Files Server
• CWE-212

Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule

• Checkmk
• CWE-212

Grype has a credential disclosure vulnerability in its JSON output

• CWE-212

>=0.68.0, <0.104.1 · fixed in 0.104.1

Zoom Clients - Improper Removal of Sensitive Information

• Zoom Communications Inc. Zoom Clients
• CWE-212

Weblate leaks the IP of project member inviting user to be reviewer in Audit log

• CWE-212

<5.14.1 · fixed in 5.14.1

Shopware exposes sensitive user information via CSV export mapping

• CWE-212

<6.6.10.7 || >=6.7.0.0, <6.7.3.1 · fixed in 6.6.10.7, 6.7.3.1

Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address information potentially resulting in loss of confidentialit…

• AMD Ryzen™ 8000 Series Desktop Processors
• AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
• CWE-212

XWiki PDF export jobs store sensitive cookies unencrypted in job statuses

• CWE-212
• CWE-257

>=14.4.2, <16.4.8 || >=16.5.0-rc-1, <16.10.7 || >=17.0.0-rc-1, <17.4.0-rc-1 · fixed in 16.4.8, 16.10.7, 17.4.0-rc-1

Contao can disclose sensitive information in the news module

• Information disclosure
• CWE-212

>=5.0.0-RC1, <5.3.38 || >=5.4.0-RC1, <5.6.1 · fixed in 5.3.38, 5.6.1

Directus tokens are not redacted in flow logs, exposing session credentials to all admin

• Information disclosure
• CWE-212

<11.9.0 · fixed in 11.9.0

Artifex Ghostscript: gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1…

• Artifex Ghostscript
• CWE-212

URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+

• Information disclosure
• CWE-212

<0.11.3 || >=0.12.0, <0.12.4 || >=0.13.0, <0.13.2 || >=1.0.0, <1.0.3 · fixed in 0.11.3, 0.12.4, 0.13.2, 1.0.3

Cisco Application Policy Infrastructure Controller Authenticated Command Injection Due to Sensitive Disclosure Vulnerability

• Cisco Application Policy Infrastructure Controller (APIC)
• CWE-212

kube-audit-rest's example logging configuration could disclose secret values in the audit log in github.com/RichardoC/kube-audit-rest

• Information disclosure
• CWE-212

<0.0.0-20250129191722-db1aa5b86725 · fixed in 0.0.0-20250129191722-db1aa5b86725