Mickaël TRICOT ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) *created* an issue Hibernate ORM ( https://hibernate.atlassian.net/browse/HHH?atlOrigin=eyJpIjoiMzkzZDVkODMz... ) / Improvement ( https://hibernate.atlassian.net/browse/HHH-13926?atlOrigin=eyJpIjoiMzkzZD... ) HHH-13926 ( https://hibernate.atlassian.net/browse/HHH-13926?atlOrigin=eyJpIjoiMzkzZD... ) StaleStateException should (optionally) not leak statements in the logs ( https://hibernate.atlassian.net/browse/HHH-13926?atlOrigin=eyJpIjoiMzkzZD... ) Issue Type: Improvement Affects Versions: 5.4.13 Assignee: Unassigned Components: hibernate-core Created: 03/Apr/2020 08:24 AM Priority: Minor Reporter: Mickaël TRICOT ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=557058%... ) When a StaleStateException is raised, the statement is always added to the exception message. As a result, sensible data may leak in the logs, without any option to turn it off (apart from hiding the exceptions, which does not sound like a good option) My first idea would be to add the statement conditionally (if `show_sql` is true for instance, or any other option). Also see: HHH-11082 ( https://hibernate.atlassian.net/browse/HHH-11082 ) Closed HHH-12878 ( https://hibernate.atlassian.net/browse/HHH-12878 ) Closed ( https://hibernate.atlassian.net/browse/HHH-13926#add-comment?atlOrigin=ey... ) Add Comment ( https://hibernate.atlassian.net/browse/HHH-13926#add-comment?atlOrigin=ey... ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.... ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=Em... ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100124- sha1:7217f9f )