{"action":"Upgrade wallabag/wallabag to 2.6.3 or later.","affected":[{"fixed":"2.6.3","introduced":"2.0.0-alpha.1"}],"component":"wallabag/wallabag","cve_ids":["CVE-2023-4455"],"ecosystem":"Packagist","epss":0.00321,"exploited":false,"fixed_versions":["2.6.3"],"ghsa_id":"GHSA-gjvc-55fw-v6vq","id":"tcs_01M5KF2VH8C31JXQZGAZWBB762","modified_at":"2024-02-16T08:05:24.353339Z","published_at":"2023-08-21T20:28:03Z","references":["https://osv.dev/vulnerability/GHSA-gjvc-55fw-v6vq","https://github.com/wallabag/wallabag/security/advisories/GHSA-gjvc-55fw-v6vq","https://github.com/wallabag/wallabag/commit/ffcc5c9062fcc8cd922d7d6d65edbe5efae96806","https://github.com/wallabag/wallabag","https://huntr.dev/bounties/5ab1b206-5fe8-4737-b275-d705e76f193a"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-gjvc-55fw-v6vq","url":"https://osv.dev/vulnerability/GHSA-gjvc-55fw-v6vq"}],"summary":"Wallabag user can delete own API client unintentionally"}