engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
607 commits 2 branches 0 tags 239 MiB
Commit graph

1 commit

Author SHA1 Message Date
russell@unturf.com
f85ccf9b99 open-webui-0001: CWE-312 logged secret in PersistentConfig Redis sync 
AppConfig.__getattr__ logs raw decoded values when config keys change
via Redis, including OPENAI_API_KEYS, GOOGLE_CLIENT_SECRET, and 20+
other API key/token/password PersistentConfig entries. Fix: redact
values for keys matching SECRET/KEY/TOKEN/PASSWORD/CREDENTIAL denylist.

13/13 PASS
 2026-03-31 11:43:57 -04:00