{"action":"Upgrade org.graylog:graylog-parent to 6.1.2 or later.","affected":[{"fixed":"6.1.2","introduced":"6.1.0"}],"component":"org.graylog:graylog-parent","cve_ids":["CVE-2024-52506"],"ecosystem":"Maven","epss":0.00632,"exploited":false,"fixed_versions":["6.1.2"],"ghsa_id":"GHSA-vggm-3478-vm5m","id":"tcs_01M5N9E27ERWQ0E47P2DW5WB2Y","modified_at":"2025-09-23T22:26:50.467581Z","published_at":"2024-11-18T20:02:26Z","references":["https://osv.dev/vulnerability/GHSA-vggm-3478-vm5m","https://github.com/Graylog2/graylog2-server/security/advisories/GHSA-vggm-3478-vm5m","https://nvd.nist.gov/vuln/detail/CVE-2024-52506","https://github.com/Graylog2/graylog2-server","https://www.vicarius.io/vsociety/posts/cve-2024-52506-detect-graylog-vulnerability","https://www.vicarius.io/vsociety/posts/cve-2024-52506-mitigate-graylog-vulnerability"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-vggm-3478-vm5m","url":"https://osv.dev/vulnerability/GHSA-vggm-3478-vm5m"}],"summary":"Graylog concurrent PDF report rendering can leak other users' reports"}