{"action":"Upgrade wallabag/wallabag to 2.6.11 or later.","affected":[{"fixed":"2.6.11","introduced":"0"}],"component":"wallabag/wallabag","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.6.11"],"ghsa_id":"GHSA-5pm7-cp8f-p2c2","id":"tcs_01M5KEW8VWC43H132AH8XRP1ZT","modified_at":"2025-04-09T13:27:38.527902Z","published_at":"2025-04-09T13:09:26Z","references":["https://osv.dev/vulnerability/GHSA-5pm7-cp8f-p2c2","https://github.com/wallabag/wallabag/security/advisories/GHSA-5pm7-cp8f-p2c2","https://github.com/wallabag/wallabag/commit/edffef837598355c9bec433c469f1e04c35b27cb","https://github.com/wallabag/wallabag/commit/ed1acf59e166a2a6bb81c52baaeabd6196feae98","https://github.com/wallabag/wallabag/commit/eb8408b22fbaa6b3d78047d6203b23b7f52bbf03","https://github.com/wallabag/wallabag/commit/e162408139ac9bb12e69f4d49de45ade49369c21","https://github.com/wallabag/wallabag/commit/ddf2e808422e41ea55cebf2aa12eb1823c5c340a","https://github.com/wallabag/wallabag/commit/d703fa6a3a75f7c3b433e8caf618bfb0a9a0ba63","https://github.com/wallabag/wallabag/commit/d1e128900acc0cb8c88eb7a085c9ef5420cf0c43","https://github.com/wallabag/wallabag/commit/cf49be694089667bbab9f10d52862fbdba9a89de","https://github.com/wallabag/wallabag/commit/ac5b5fb379233d6e96ea14ae21b7f88761d5fa3f","https://github.com/wallabag/wallabag/commit/99c8a06594d6ee7480ce4d041ccff3025b353656","https://github.com/wallabag/wallabag/commit/6fa61c0f9c48d37625c92a8913b487230761fb47","https://github.com/wallabag/wallabag/commit/677b2986bc78df4c7ecfed87a24593fa0553fd3c","https://github.com/wallabag/wallabag/commit/5ea5115a721651f2af349e8451be8947dad9c814","https://github.com/wallabag/wallabag/commit/3817010e29ed368df271cdd11ec71a46a341c673","https://github.com/wallabag/wallabag/commit/27f0d94db72fb2a54b5965e4e9908a0f418f44b5","https://github.com/wallabag/wallabag/commit/264f91126e2c42188b80848c881264da743b4dc1","https://github.com/wallabag/wallabag/commit/0d8429dfc77b84f50060b253fd84f1c09b892226","https://github.com/wallabag/wallabag/commit/00d0e6f951927434039465b4d3ae3dd661911172","https://github.com/wallabag/wallabag"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-5pm7-cp8f-p2c2","url":"https://osv.dev/vulnerability/GHSA-5pm7-cp8f-p2c2"}],"summary":"wallabag/wallabag Has Multiple Cross-Site Request Forgery (CSRF) Vulnerabilities"}