AIKIDO-2025-10719

TL;DR

Affected versions of this package are vulnerable to Insecure Logging of Bearer Tokens, where full bearer tokens are logged in exceptions during API request failures and response parsing errors, exposing sensitive credentials in logs despite the debug_headers setting being false. An attacker with access to these logs, such as through insufficiently protected log storage or transmission, could extract the bearer tokens and use them to impersonate users, execute unauthorized API calls, or access sensitive data, leading to potential data breaches or privilege escalation.