{"action":"Upgrade github.com/juju/juju to 0.0.0-20250619024904-402ff008dcc2 or later.","affected":[{"introduced":"0"}],"component":"github.com/juju/juju","cve_ids":["CVE-2025-53512"],"ecosystem":"Go","epss":0.00378,"exploited":false,"fixed_versions":["0.0.0-20250619024904-402ff008dcc2"],"ghsa_id":"GHSA-r64v-82fh-xc63","id":"tcs_01M5KFM5PTCC609RD05TXY7DRC","modified_at":"2025-07-28T20:42:15.788089Z","published_at":"2025-07-09T15:30:58Z","references":["https://osv.dev/vulnerability/GHSA-r64v-82fh-xc63","https://github.com/juju/juju/security/advisories/GHSA-r64v-82fh-xc63","https://nvd.nist.gov/vuln/detail/CVE-2025-53512","https://github.com/juju/juju/commit/402ff008dcc2cb57f4441968628637efb5c2a662","https://github.com/juju/juju/commit/c91a1f4046956874ba77c8b398aecee3d61a2dc3","https://github.com/juju/juju"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-r64v-82fh-xc63","url":"https://osv.dev/vulnerability/GHSA-r64v-82fh-xc63"}],"summary":"Juju vulnerable to sensitive log retrieval via authenticated endpoint without authorization"}