{"action":"Upgrade github.com/kube-logging/logging-operator to 0.0.0-20260608145523-cf437d7f1e05 or later.","affected":[{"introduced":"0"}],"component":"github.com/kube-logging/logging-operator","cve_ids":["CVE-2026-54680"],"ecosystem":"Go","epss":0.00785,"exploited":false,"fixed_versions":["0.0.0-20260608145523-cf437d7f1e05"],"ghsa_id":"GHSA-mjqf-28ph-426h","id":"tcs_01M5KFG0Y5KK2H2698BWNFQC5Z","modified_at":"2026-09-10T03:50:52.755484247Z","published_at":"2026-07-29T17:01:29Z","references":["https://osv.dev/vulnerability/GHSA-mjqf-28ph-426h","https://github.com/kube-logging/logging-operator/security/advisories/GHSA-mjqf-28ph-426h","https://github.com/kube-logging/logging-operator/commit/cf437d7f1e056c78740bf5716ac8bdebcf002425","https://github.com/kube-logging/logging-operator","https://github.com/kube-logging/logging-operator/releases/tag/6.6.0"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-mjqf-28ph-426h","url":"https://osv.dev/vulnerability/GHSA-mjqf-28ph-426h"}],"summary":"Logging operator has Fluentd configuration injection that allows remote code execution"}