Redis Parser logs real password #226

New Issue

MrUnknownDE · 2026-04-05T16:17:09+02:00

MrUnknownDE commented

2026-04-05 16:17:09 +02:00

Originally created by @Skylinar on 9/13/2025

Hey,
checking logs while debugging I saw that the redis parser logs the real password. For security resons I would recommend to not log this without obfuscating it or do not log it at all.

In this example it is getting logged as it is into the args array:

[0] [1] ReplyError: WRONGPASS invalid username-password pair or user is disabled.
[0] [1]     at parseError (/app/node_modules/.pnpm/redis-parser@3.0.0/node_modules/redis-parser/lib/parser.js:179:12)
[0] [1]     at parseType (/app/node_modules/.pnpm/redis-parser@3.0.0/node_modules/redis-parser/lib/parser.js:302:14) {
[0] [1]   command: { name: 'auth', args: [ 'asd' ] }
[0] [1] }

*Originally created by @Skylinar on 9/13/2025* Hey, checking logs while debugging I saw that the redis parser logs the real password. For security resons I would recommend to not log this without obfuscating it or do not log it at all. In this example it is getting logged as it is into the `args` array: ``` [0] [1] ReplyError: WRONGPASS invalid username-password pair or user is disabled. [0] [1] at parseError (/app/node_modules/.pnpm/redis-parser@3.0.0/node_modules/redis-parser/lib/parser.js:179:12) [0] [1] at parseType (/app/node_modules/.pnpm/redis-parser@3.0.0/node_modules/redis-parser/lib/parser.js:302:14) { [0] [1] command: { name: 'auth', args: [ 'asd' ] } [0] [1] } ```

MrUnknownDE closed this issue

2026-04-05 16:17:09 +02:00

MrUnknownDE added the bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug labels 2026-04-05 16:17:09 +02:00

Sign in to join this conversation.

No Label bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/OpenArchiver#226