{"action":"Upgrade github.com/juju/juju to 0.0.0-20250619024904-402ff008dcc2 or later.","affected":[{"introduced":"0"}],"component":"github.com/juju/juju","cve_ids":["CVE-2025-53512"],"ecosystem":"Go","epss":0.00378,"exploited":false,"fixed_versions":["0.0.0-20250619024904-402ff008dcc2"],"ghsa_id":"GHSA-r64v-82fh-xc63","id":"tcs_01M5KG9D6XGK8K96E03DCMGQDH","modified_at":"2026-03-03T04:57:21.905614Z","published_at":"2025-07-28T19:57:13Z","references":["https://osv.dev/vulnerability/GO-2025-3806","https://github.com/juju/juju/security/advisories/GHSA-r64v-82fh-xc63","https://nvd.nist.gov/vuln/detail/CVE-2025-53512","https://github.com/juju/juju/commit/402ff008dcc2cb57f4441968628637efb5c2a662","https://github.com/juju/juju/commit/c91a1f4046956874ba77c8b398aecee3d61a2dc3"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GO-2025-3806","url":"https://osv.dev/vulnerability/GO-2025-3806"},{"source":"nvd","source_id":"CVE-2025-53512","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-53512"}],"summary":"Juju vulnerable to sensitive log retrieval via authenticated endpoint without authorization in github.com/juju/juju"}