Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/08/26 2:28 p.m.4 views

@logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys

@logtape/syslog contains two related output-encoding bugs in the structured data formatting code. Both only affect deployments with includeStructuredData: true, which is non-default. 1. Unescaped C0 control characters in structured data values escapeStructuredDataValue in...

8.6CVSS5.8AI score
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/08/26 2:27 p.m.3 views

EUVD-2026-66563

LogTape is an unobtrusive logging library. Prior to 1.3.11, 2.0.14, and 2.1.5, the @logtape/syslog package's escapeStructuredDataValue function in packages/syslog/src/syslog.ts does not neutralize C0 control characters from U+0000 through U+001F in structured data values, and formatStructuredData...

8.6CVSS5.6AI score
SaveExploits0References5
Rows per page
Query Builder