{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.19.1-rc.1"}],"component":"lemmy_api","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-95q8-x6r6-672m","id":"tcs_01M5KEW4YC3XEJXT57KZF22ZA4","modified_at":"2026-06-08T23:45:14.595878734Z","published_at":"2026-05-06T22:22:41Z","references":["https://osv.dev/vulnerability/GHSA-95q8-x6r6-672m","https://github.com/LemmyNet/lemmy/security/advisories/GHSA-95q8-x6r6-672m","https://github.com/LemmyNet/lemmy/commit/637151121a8e27b2b8c95e98d6f86966b31b4a6d","https://github.com/LemmyNet/lemmy"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-95q8-x6r6-672m","url":"https://osv.dev/vulnerability/GHSA-95q8-x6r6-672m"}],"summary":"Lemmy may expose private community data through community, saved, liked, and modlog API views"}