{"action":"Upgrade @logtape/syslog to 1.3.11 or later.","affected":[{"fixed":"2.1.5","introduced":"2.1.0"},{"fixed":"2.0.14","introduced":"2.0.0"},{"fixed":"1.3.11","introduced":"0"}],"component":"@logtape/syslog","cve_ids":["CVE-2026-54511"],"ecosystem":"npm","epss":0.00476,"exploited":false,"fixed_versions":["2.1.5","2.0.14","1.3.11"],"ghsa_id":"GHSA-8h6h-x5pq-56fq","id":"tcs_01M5KFD1EEKXTR7N8WKBM5C7DG","modified_at":"2026-08-26T14:56:26.895872Z","published_at":"2026-08-26T14:28:04Z","references":["https://osv.dev/vulnerability/GHSA-8h6h-x5pq-56fq","https://github.com/dahlia/logtape/security/advisories/GHSA-8h6h-x5pq-56fq","https://github.com/dahlia/logtape/commit/7a6e5b9ddf7915edfff78fa129bc17c979b2a623","https://github.com/dahlia/logtape","https://github.com/dahlia/logtape/releases/tag/1.3.11","https://github.com/dahlia/logtape/releases/tag/2.0.14","https://github.com/dahlia/logtape/releases/tag/2.1.5"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-8h6h-x5pq-56fq","url":"https://osv.dev/vulnerability/GHSA-8h6h-x5pq-56fq"}],"summary":"@logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys"}