Skip to content
OpenAdvisories

Package · npm

@logtape/syslog

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.6
    CVE-2026-54511

    @logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys

    LogTape is an unobtrusive logging library. Prior to 1.3.11, 2.0.14, and 2.1.5, the @logtape/syslog package's escapeStructuredDataValue() function in packages/syslog/src/syslog.ts does not neutralize C0 control characters from U+0000 through U+001F in structur…

    dahlia logtape @logtape/syslog npm