CVE-2026-6720
3 advisories.
Go/github.com/projectcalico/calicoctl/v3 CVE-2026-6720: high
Calico Inserts Sensitive Information into Log File
Action: Upgrade github.com/projectcalico/calicoctl/v3 to 3.31.6 or later.
go get github.com/projectcalico/calicoctl/v3@v3.31.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.31.6 | - |
Fixed versions
| 3.31.6 |
Sources
- osv: GHSA-3m4q-ggcj-j6m4
- https://nvd.nist.gov/vuln/detail/CVE-2026-6720
- https://github.com/projectcalico/calico/pull/12535
- https://github.com/projectcalico/calico/pull/12536
- https://github.com/projectcalico/calico/pull/12537
- https://github.com/projectcalico/calico/commit/12908bb48a5bf8cbab5373f4d532509a30cf9b7f
- https://github.com/projectcalico/calico/commit/8d87eddcb5eb6efc70c09eb0a33d63137359ea70
- https://github.com/projectcalico/calico/commit/ce3ab2b39b5841757cbccf7922c895c47827f562
- https://github.com/projectcalico/calico
- https://www.tigera.io/security-bulletins/tta-2026-003
CVE-2026-6720 · published · modified · JSON
Go/github.com/projectcalico/calicoctl CVE-2026-6720: unknown
Calico Inserts Sensitive Information into Log File in github.com/projectcalico/calicoctl
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-5893
- https://github.com/advisories/GHSA-3m4q-ggcj-j6m4
- https://nvd.nist.gov/vuln/detail/CVE-2026-6720
- https://github.com/projectcalico/calico/commit/12908bb48a5bf8cbab5373f4d532509a30cf9b7f
- https://github.com/projectcalico/calico/commit/8d87eddcb5eb6efc70c09eb0a33d63137359ea70
- https://github.com/projectcalico/calico/commit/ce3ab2b39b5841757cbccf7922c895c47827f562
- https://github.com/projectcalico/calico/pull/12535
- https://github.com/projectcalico/calico/pull/12536
- https://github.com/projectcalico/calico/pull/12537
- https://www.tigera.io/security-bulletins/tta-2026-003
CVE-2026-6720 · published · modified · JSON
Go/github.com/projectcalico/calicoctl/v3 CVE-2026-6720: unknown
Calico Inserts Sensitive Information into Log File in github.com/projectcalico/calicoctl
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-5893#Go/github.com/projectcalico/calicoctl/v3
- https://github.com/advisories/GHSA-3m4q-ggcj-j6m4
- https://nvd.nist.gov/vuln/detail/CVE-2026-6720
- https://github.com/projectcalico/calico/commit/12908bb48a5bf8cbab5373f4d532509a30cf9b7f
- https://github.com/projectcalico/calico/commit/8d87eddcb5eb6efc70c09eb0a33d63137359ea70
- https://github.com/projectcalico/calico/commit/ce3ab2b39b5841757cbccf7922c895c47827f562
- https://github.com/projectcalico/calico/pull/12535
- https://github.com/projectcalico/calico/pull/12536
- https://github.com/projectcalico/calico/pull/12537
- https://www.tigera.io/security-bulletins/tta-2026-003
CVE-2026-6720 · published · modified · JSON