zhmcclient
A pure Python client library for the IBM Z HMC Web Services API
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 115
- Cadence
- ~9 days
- Last 12 months
- 4
Reach
- Stars
- —
Details
- License
- Apache-2.0
- First release
- Aug 24, 2016
| Version | Released | |
|---|---|---|
1.26.0
minor
| ||
1.25.1
patch
| ||
1.25.0
minor
| ||
1.24.1
patch
| ||
1.24.0
minor
| ||
1.23.2
patch
| ||
1.23.1
patch
| ||
1.23.0
minor
| ||
1.22.1
patch
| ||
1.22.0
minor
| ||
1.21.1
patch
| ||
1.21.0
minor
| ||
1.20.3
patch
| ||
1.20.2
patch
| ||
1.20.1
patch
| ||
1.20.0
minor
| ||
1.19.2
patch
| ||
1.19.1
patch
| ||
1.18.3
patch
| ||
1.19.0
minor
| ||
1.18.2
patch
| ||
1.18.1
patch
| ||
1.18.0
minor
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.17.2
patch
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.17.1
patch
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.17.0
minor
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.16.2
patch
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.16.1
patch
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.16.0
minor
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.15.0
minor
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.14.1
patch
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.14.0
minor
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.13.4
patch
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.13.3
patch
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.13.3.dev1
pre
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.13.2
patch
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.13.1
patch
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.12.4
patch
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.13.0
minor
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.12.3
patch
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.12.2
patch
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.12.1
patch
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.12.0
minor
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.11.4
patch
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.11.3
patch
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.11.2
patch
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.11.1
patch
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.11.0
minor
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.10.1
patch
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
1.10.0
minor
1 CVE
CVE-2024-53865
PYSEC-2026-2073
GHSA-p57h-3cmc-xpjq
Jul 07, 2026
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
Low
Local
Low
High
None
ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases:
This issue affects only users of the zhmcclient package that have enabled the Python loggers named "zhmcclient.api" (for the API log) or "zhmcclient.hmc" (for the HMC log) and that use the functions listed above. PatchesHas been fixed in zhmcclient version 1.18.1 WorkaroundsNot applicable, since fix is available. ReferencesNone Affected versions
0.1.0
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
+ 82 more Show less
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.26.0
0.26.1
0.26.2
0.27.0
0.28.0
0.29.0
0.3.0
0.30.0
0.30.1
0.30.2
0.31.0
0.31.1
0.32.0
0.32.1
0.4.0
0.5.0
0.5.1.dev39
0.6.0
0.7.0
0.8.0
0.9.0
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.10.0
1.10.1
1.11.0
1.11.1
1.11.2
1.11.3
1.11.4
1.12.0
1.12.1
1.12.2
1.12.3
1.12.4
1.13.0
1.13.1
1.13.2
1.13.3
1.13.3.dev1
1.13.4
1.14.0
1.14.1
1.15.0
1.16.0
1.16.1
1.16.2
1.17.0
1.17.1
1.17.2
1.18.0
1.2.0
1.2.1
1.2.2
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0
1.8.1
1.8.2
1.9.0
1.9.1
Fixed in
1.18.1
References
Updated Jul 07, 2026 · Source: OSV.dev |