{"action":"Upgrade @whyour/qinglong to 2.20.1 or later.","affected":[{"fixed":"2.20.1","introduced":"0"}],"component":"@whyour/qinglong","cve_ids":["CVE-2026-55445"],"ecosystem":"npm","epss":0.00528,"exploited":false,"fixed_versions":["2.20.1"],"ghsa_id":"GHSA-v667-gc2r-2xm7","id":"tcs_01M5KGAYMCSFZHW80CKF93KKAN","modified_at":"2026-08-20T18:45:14.886925960Z","published_at":"2026-08-20T18:36:59Z","references":["https://osv.dev/vulnerability/GHSA-v667-gc2r-2xm7","https://github.com/whyour/qinglong/security/advisories/GHSA-v667-gc2r-2xm7","https://nvd.nist.gov/vuln/detail/CVE-2026-55445","https://github.com/whyour/qinglong/pull/2941","https://github.com/whyour/qinglong/commit/6bec52dca158481258315ba0fc2f11206df7b719","https://github.com/whyour/qinglong"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-v667-gc2r-2xm7","url":"https://osv.dev/vulnerability/GHSA-v667-gc2r-2xm7"}],"summary":"Qinglong has an incomplete fix for CVE-2026-3965: Improper Authentication"}