{"action":"Upgrade github.com/hyperledger/fabric-ca to 1.5.21 or later.","affected":[{"fixed":"1.5.21","introduced":"0"}],"component":"github.com/hyperledger/fabric-ca","cve_ids":["CVE-2026-53658"],"ecosystem":"Go","epss":0.0045,"exploited":false,"fixed_versions":["1.5.21"],"ghsa_id":"GHSA-xghw-p77p-3r7x","id":"tcs_01M5KFS4CB4BZKWPAY1B7HTFB1","modified_at":"2026-08-18T17:23:59.170170132Z","published_at":"2026-08-14T19:24:57Z","references":["https://osv.dev/vulnerability/GHSA-xghw-p77p-3r7x","https://github.com/hyperledger/fabric-ca/security/advisories/GHSA-xghw-p77p-3r7x","https://github.com/hyperledger/fabric-ca/commit/d379df823534d56dec0166a6da8f0415e3beee24","https://github.com/hyperledger/fabric-ca"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-xghw-p77p-3r7x","url":"https://osv.dev/vulnerability/GHSA-xghw-p77p-3r7x"}],"summary":"Fabric CA Developer's Guide: LDAP Injection via Unescaped Username in GetUser Filter"}