AIKIDO-2025-10629

TL;DR

Affected versions of this package are vulnerable to Information Exposure through logging. When the log level is set to TRACE for debugging purposes, the extension may inadvertently log Base64-encoded credentials. Although this behavior is documented as a warning, it presents an unexpected risk where sensitive authentication details are written to log files. An attacker with read access to these application log files could easily retrieve and decode the Base64 strings to obtain the cleartext credentials, potentially leading to unauthorized system access.