{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"26.0"}],"component":"wwbn/avideo","cve_ids":["CVE-2026-34395"],"ecosystem":"Packagist","epss":0.00329,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-77jp-mgcw-rfmr","id":"tcs_01M5KEXT35FGXDEB4HKDSMNDK6","modified_at":"2026-03-31T23:41:23.270775Z","published_at":"2026-03-31T23:21:50Z","references":["https://osv.dev/vulnerability/GHSA-77jp-mgcw-rfmr","https://github.com/WWBN/AVideo/security/advisories/GHSA-77jp-mgcw-rfmr","https://nvd.nist.gov/vuln/detail/CVE-2026-34395","https://github.com/WWBN/AVideo/commit/db37b4e9d9e7c733e5d4c5881e10b2b9d2670983","https://github.com/WWBN/AVideo"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-77jp-mgcw-rfmr","url":"https://osv.dev/vulnerability/GHSA-77jp-mgcw-rfmr"}],"summary":"AVideo vulnerable to Mass User PII Disclosure via Missing Authorization in YPTWallet users.json.php"}