CVE-2026-22041: loggingredactor converts non-string types to string types in logs

January 7, 2026 (updated January 8, 2026)

Non-string types are converted into string types, leading to type errors in %d conversions.

References

github.com/advisories/GHSA-rvjx-cfjh-5mc9
github.com/armurox/loggingredactor
github.com/armurox/loggingredactor/issues/7
github.com/armurox/loggingredactor/releases/tag/0.0.6
github.com/armurox/loggingredactor/security/advisories/GHSA-rvjx-cfjh-5mc9
nvd.nist.gov/vuln/detail/CVE-2026-22041

Code Behaviors & Features

Detect and mitigate CVE-2026-22041 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →