{"action":"Upgrade github.com/seaweedfs/seaweedfs to 0.0.0-20260526080459-dd1b4287899e or later.","affected":[{"introduced":"0"}],"component":"github.com/seaweedfs/seaweedfs","cve_ids":["CVE-2026-54917","CVE-2026-58372"],"ecosystem":"Go","epss":0.01641,"exploited":false,"fixed_versions":["0.0.0-20260526080459-dd1b4287899e"],"ghsa_id":"GHSA-w62w-66v9-vvgv","id":"tcs_01M5KFQ8KWTS3YR4CFMRVPJ0P4","modified_at":"2026-09-25T14:25:32.933982123Z","published_at":"2026-08-12T19:19:54Z","references":["https://osv.dev/vulnerability/GHSA-w62w-66v9-vvgv","https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-w62w-66v9-vvgv","https://nvd.nist.gov/vuln/detail/CVE-2026-54917","https://github.com/seaweedfs/seaweedfs/pull/9687","https://github.com/seaweedfs/seaweedfs/commit/dd1b4287899eed3dfd73c2f3b1de001996fda229","https://github.com/seaweedfs/seaweedfs"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-w62w-66v9-vvgv","url":"https://osv.dev/vulnerability/GHSA-w62w-66v9-vvgv"}],"summary":"SeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access"}