Maven/org.sakaiproject.profile2:profile2-api CVE-2026-54050: medium 6.5, EPSS 0.31%
Sakai Profile Image Deletion has an IDOR
Action: Upgrade org.sakaiproject.profile2:profile2-api to 23.5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 23.0 | 23.5 | - |
| 25.0 | - | 25.2 |
Fixed versions
| 23.5 |
Sources
- osv: GHSA-9284-fjc3-fmmj
- https://github.com/sakaiproject/sakai/security/advisories/GHSA-9284-fjc3-fmmj
- https://github.com/sakaiproject/sakai/commit/a092dbf3dc6bf343131f50007c207a9abd95e852
- https://github.com/sakaiproject/sakai
- https://github.com/sakaiproject/sakai/releases/tag/23.5
CVE-2026-54050 · published · modified · JSON