{"action":"Upgrade github.com/kube-logging/logging-operator to 0.0.0-20260608145523-cf437d7f1e05 or later.","affected":[{"introduced":"0"}],"component":"github.com/kube-logging/logging-operator","cve_ids":["CVE-2026-54680"],"ecosystem":"Go","epss":0.00785,"exploited":false,"fixed_versions":["0.0.0-20260608145523-cf437d7f1e05"],"ghsa_id":"GHSA-mjqf-28ph-426h","id":"tcs_01M5KGS4KYCPY9J9FVG8FH5HGD","modified_at":"2026-08-18T15:00:23.169967693Z","published_at":"2026-08-18T14:32:29Z","references":["https://osv.dev/vulnerability/GO-2026-6142","https://github.com/kube-logging/logging-operator/security/advisories/GHSA-mjqf-28ph-426h","https://github.com/kube-logging/logging-operator/commit/cf437d7f1e056c78740bf5716ac8bdebcf002425","https://github.com/kube-logging/logging-operator/releases/tag/6.6.0"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-6142","url":"https://osv.dev/vulnerability/GO-2026-6142"}],"summary":"Logging operator has Fluentd configuration injection that allows remote code execution in github.com/kube-logging/logging-operator"}