{"action":"Upgrade wallabag/wallabag to 2.6.7 or later.","affected":[{"fixed":"2.6.7","introduced":"2.0.0-alpha.1"}],"component":"wallabag/wallabag","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.6.7"],"ghsa_id":"GHSA-56fm-hfp3-x3w3","id":"tcs_01M5KEVP9WEP2QT1GKPWGY01SS","modified_at":"2024-12-07T05:40:26.649604Z","published_at":"2023-10-02T21:39:57Z","references":["https://osv.dev/vulnerability/GHSA-56fm-hfp3-x3w3","https://github.com/wallabag/wallabag/security/advisories/GHSA-56fm-hfp3-x3w3","https://github.com/wallabag/wallabag/commit/0cfdddc2eb0aee5ffb69bf499d377d75655ba157","https://github.com/wallabag/wallabag","https://huntr.dev/bounties/4c446fe7-2a44-4907-b0cf-4ab77d75c487"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-56fm-hfp3-x3w3","url":"https://osv.dev/vulnerability/GHSA-56fm-hfp3-x3w3"}],"summary":"Wallabag user can disable 2FA unintentionally"}