russell@unturf.com f85ccf9b99 open-webui-0001: CWE-312 logged secret in PersistentConfig Redis sync ... AppConfig.__getattr__ logs raw decoded values when config keys change via Redis, including OPENAI_API_KEYS, GOOGLE_CLIENT_SECRET, and 20+ other API key/token/password PersistentConfig entries. Fix: redact values for keys matching SECRET/KEY/TOKEN/PASSWORD/CREDENTIAL denylist. 13/13 PASS		2026-03-31 11:43:57 -04:00
..
open-webui-0001.patch	open-webui-0001: CWE-312 logged secret in PersistentConfig Redis sync	2026-03-31 11:43:57 -04:00