russell@unturf.com 409d0f1907 imagemagick+ffmpeg: 5-MOAD scan; ffmpeg-0004 CWE-312 Authorization header logged at AV_LOG_DEBUG ... ffmpeg-0004 (MOAD-0004 / CWE-312): libavformat/http.c http_connect() logs the full HTTP request at AV_LOG_DEBUG, including the Authorization: Basic header with base64-encoded user:pass. Fix: produce a sanitized copy before av_log, replacing auth header values with ***REDACTED***. Wire bytes unchanged. 22/22 unit tests PASS. FFmpeg MOADs 0002/0003/0005: CLEAN. ImageMagick MOADs 0002-0005: CLEAN.		2026-03-31 21:10:24 -04:00
..
Ffmpeg0003MpegtsProgramDiscardTest.java	nmap-0002 + haproxy-0004 + nginx-0004 + weechat-0003 + zeek-0002 + curl-0004: 6 new CWE-407 defects in network tools; count 693→699	2026-03-29 22:22:11 -04:00
FFmpegCodecTagTest.java	whitepaper: 312 sites / 151 ecosystems — wave2+3 defect tables and PDF rebuild	2026-03-27 15:23:43 -04:00
FFmpegHttpAuthLogTest.java	imagemagick+ffmpeg: 5-MOAD scan; ffmpeg-0004 CWE-312 Authorization header logged at AV_LOG_DEBUG	2026-03-31 21:10:24 -04:00
FFmpegTest.java	curl/ffmpeg: CWE-407 findings — awssigv4 bubble sort + filtergraph format merge	2026-03-30 09:38:07 -04:00