libinput 1.28.903 - fixes key events accidentally printed (and thus logged to the system log) if debug logs were enabled at the compositor level. Only affects the recent 1.28.901 and 1.28.902 releases, mutter/wlroots are unaffected but kwin and Xorg may log depending on whether the user has enabled debug logging (which is unlikely).

Source: Fedora 42: libinput 1.28.903 Security Fix for Debug Logging Issue