Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
added 2026/08/26 2:28 p.m.9 views

@logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys

@logtape/syslog contains two related output-encoding bugs in the structured data formatting code. Both only affect deployments with includeStructuredData: true, which is non-default. 1. Unescaped C0 control characters in structured data values escapeStructuredDataValue in...

8.6CVSS5.8AI score0.00306EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/08/26 2:28 p.m.8 views

GHSA-8H6H-X5PQ-56FQ @logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys

@logtape/syslog contains two related output-encoding bugs in the structured data formatting code. Both only affect deployments with includeStructuredData: true, which is non-default. 1. Unescaped C0 control characters in structured data values escapeStructuredDataValue in...

8.6CVSS6AI score0.00306EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/26 2:27 p.m.9 views

EUVD-2026-66563

LogTape is an unobtrusive logging library. Prior to 1.3.11, 2.0.14, and 2.1.5, the @logtape/syslog package's escapeStructuredDataValue function in packages/syslog/src/syslog.ts does not neutralize C0 control characters from U+0000 through U+001F in structured data values, and formatStructuredData...

8.6CVSS5.6AI score0.00306EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/26 2:27 p.m.22 views

CVE-2026-54511

@logtape/syslog (part of LogTape, a Node.js logging library) contains two related output-encoding bugs in its structured-data formatting, affecting versions prior to 1.3.11 , 2.0.14 , and 2.1.5 when includeStructuredData is set to true (non-default). The escapeStructuredDataValue() function fails...

8.6CVSS5.6AI score0.00306EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/26 2:27 p.m.7 views

CVE-2026-54511 @logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys

LogTape is an unobtrusive logging library. Prior to 1.3.11, 2.0.14, and 2.1.5, the @logtape/syslog package's escapeStructuredDataValue function in packages/syslog/src/syslog.ts does not neutralize C0 control characters from U+0000 through U+001F in structured data values, and formatStructuredData...

8.6CVSS5.8AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.14 views

PT-2026-82112

Name of the Vulnerable Software and Affected Versions @logtape/syslog versions prior to 1.3.11 @logtape/syslog versions prior to 2.0.14 @logtape/syslog versions prior to 2.1.5 Description Two output-encoding issues exist in the structured data formatting code when includeStructuredData is set to...

8.6CVSS6AI score0.00306EPSS
SaveExploits0References11
Rows per page
Query Builder