{"action":"Upgrade miraheze/ts-portal to 30 or later.","affected":[{"fixed":"30","introduced":"0"}],"component":"miraheze/ts-portal","cve_ids":["CVE-2026-29788"],"ecosystem":"Packagist","epss":0.00378,"exploited":false,"fixed_versions":["30"],"ghsa_id":"GHSA-gfhq-7499-f3f2","id":"tcs_01M5KF2P6RX39VF6CP05K29DSX","modified_at":"2026-04-09T05:21:46.944471Z","published_at":"2026-03-27T15:37:10Z","references":["https://osv.dev/vulnerability/GHSA-gfhq-7499-f3f2","https://github.com/miraheze/TSPortal/security/advisories/GHSA-gfhq-7499-f3f2","https://nvd.nist.gov/vuln/detail/CVE-2026-29788","https://api.laravel.com/docs/12.x/Illuminate/Foundation/Configuration/Middleware.html#method_convertEmptyStringsToNull","https://github.com/miraheze/TSPortal","https://issue-tracker.miraheze.org/T15053"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-gfhq-7499-f3f2","url":"https://osv.dev/vulnerability/GHSA-gfhq-7499-f3f2"}],"summary":"TSPortal: Any user can forge self-deletion requests for any account"}