CVE-2026-54162: ember Go
CVSS: 4.7v3.1MediumPublished
AliasesGHSA-x3g7-qrwc-f6c5GO-2026-6270
Published 25-08-2026Last modified 26-08-2026
Vulnerability summary
CVE-2026-54162 is a medium (CVSS 4.7) vulnerability in ember Go.
CVSS score
4.7/10
010
Medium · v3.1 (OSV · Go), selected by version preferenceEPSS score
Not scored
0%100%
No EPSS score yetKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 2 · Related 2Timeline
- 25-08-2026PublishedVulnerability first disclosed.
- 26-08-2026Last modifiedVulnerability information updated.
Description
Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI in github.com/alexandre-daubois/ember
CVSS metrics
1 score · 1 source · 1 versionMedium 4.7Preferred score · OSV · Go (Ecosystem advisory) · calculated from vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:NSourcesSingle source
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Github.com/alexandre-daubois1 product
- ember< 1.4.2
1 vendor · 1 product