{"action":"Upgrade github.com/projectcalico/calicoctl/v3 to 3.31.6 or later.","affected":[{"fixed":"3.31.6","introduced":"0"}],"component":"github.com/projectcalico/calicoctl/v3","cve_ids":["CVE-2026-6720"],"ecosystem":"Go","epss":0.00224,"exploited":false,"fixed_versions":["3.31.6"],"ghsa_id":"GHSA-3m4q-ggcj-j6m4","id":"tcs_01M5KEV27603QZK66ZHK2FSGY6","modified_at":"2026-09-10T03:50:45.399486640Z","published_at":"2026-05-28T18:30:32Z","references":["https://osv.dev/vulnerability/GHSA-3m4q-ggcj-j6m4","https://nvd.nist.gov/vuln/detail/CVE-2026-6720","https://github.com/projectcalico/calico/pull/12535","https://github.com/projectcalico/calico/pull/12536","https://github.com/projectcalico/calico/pull/12537","https://github.com/projectcalico/calico/commit/12908bb48a5bf8cbab5373f4d532509a30cf9b7f","https://github.com/projectcalico/calico/commit/8d87eddcb5eb6efc70c09eb0a33d63137359ea70","https://github.com/projectcalico/calico/commit/ce3ab2b39b5841757cbccf7922c895c47827f562","https://github.com/projectcalico/calico","https://www.tigera.io/security-bulletins/tta-2026-003"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-3m4q-ggcj-j6m4","url":"https://osv.dev/vulnerability/GHSA-3m4q-ggcj-j6m4"},{"source":"nvd","source_id":"CVE-2026-6720","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6720"}],"summary":"Calico Inserts Sensitive Information into Log File"}