{"action":"Upgrade contao/core-bundle to 5.7.12 or later.","affected":[{"fixed":"5.7.12","introduced":"5.7.0"}],"component":"contao/core-bundle","cve_ids":["CVE-2026-107851"],"ecosystem":"Packagist","epss":0.00193,"exploited":false,"fixed_versions":["5.7.12"],"ghsa_id":"GHSA-5974-gfqc-wrcm","id":"tcs_01M5KEVVM9QBBZ8GQPR7YDSMC9","modified_at":"2026-10-09T21:00:08.462529572Z","published_at":"2026-10-09T20:53:42Z","references":["https://osv.dev/vulnerability/GHSA-5974-gfqc-wrcm","https://github.com/contao/contao/security/advisories/GHSA-5974-gfqc-wrcm","https://github.com/contao/contao/commit/9d6f582a4cc6a758ce11d1043fc9c0ba62c5f4c9","https://github.com/contao/contao","https://github.com/contao/contao/releases/tag/5.7.12"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-5974-gfqc-wrcm","url":"https://osv.dev/vulnerability/GHSA-5974-gfqc-wrcm"}],"summary":"Contao: Improper access control in the table access voter"}