{"action":"Upgrade georgringer/news to 10.0.4 or later.","affected":[{"fixed":"12.3.2","introduced":"12.0.0"},{"fixed":"13.0.2","introduced":"13.0.0"},{"fixed":"14.0.3","introduced":"14.0.0"},{"fixed":"10.0.4","introduced":"0"},{"fixed":"11.4.4","introduced":"11.0.0"}],"component":"georgringer/news","cve_ids":["CVE-2026-8726"],"ecosystem":"Packagist","epss":0.00439,"exploited":false,"fixed_versions":["12.3.2","13.0.2","14.0.3","10.0.4","11.4.4"],"ghsa_id":"GHSA-g868-j3qm-4j28","id":"tcs_01M5KF2G15BC670WGPWBKKKPEK","modified_at":"2026-09-10T03:51:05.548810812Z","published_at":"2026-05-19T12:31:39Z","references":["https://osv.dev/vulnerability/GHSA-g868-j3qm-4j28","https://nvd.nist.gov/vuln/detail/CVE-2026-8726","https://github.com/FriendsOfPHP/security-advisories/blob/master/georgringer/news/CVE-2026-8726.yaml","https://github.com/georgringer/news","https://typo3.org/security/advisory/typo3-ext-sa-2026-010"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-g868-j3qm-4j28","url":"https://osv.dev/vulnerability/GHSA-g868-j3qm-4j28"}],"summary":"georgringer/news has SQL Injection in extension \"News system\" (news)"}