An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level.
"https://github.com/pypa/advisory-database/blob/main/vulns/salt/PYSEC-2021-53.yaml"