{"action":"Upgrade koillection/koillection to 1.8.4 or later.","affected":[{"fixed":"1.8.4","introduced":"0"}],"component":"koillection/koillection","cve_ids":["CVE-2026-50888"],"ecosystem":"Packagist","epss":0.00248,"exploited":false,"fixed_versions":["1.8.4"],"ghsa_id":"GHSA-gmxh-hjfv-qc2w","id":"tcs_01M5KF2XTHQHXD9V8ZY5ZMNEM7","modified_at":"2026-08-27T17:10:37.018291Z","published_at":"2026-06-15T21:30:41Z","references":["https://osv.dev/vulnerability/GHSA-gmxh-hjfv-qc2w","https://nvd.nist.gov/vuln/detail/CVE-2026-50888","https://github.com/benjaminjonard/koillection/pull/1599","https://github.com/benjaminjonard/koillection/commit/4d445e21c631c26070f19fe8ec086a2939767ae0","https://gist.github.com/pyuysig/d60273c1c346257ceddbf8da7134bae7","https://github.com/benjaminjonard/koillection","https://github.com/benjaminjonard/koillection/releases/tag/1.8.4"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-gmxh-hjfv-qc2w","url":"https://osv.dev/vulnerability/GHSA-gmxh-hjfv-qc2w"}],"summary":"Koillection has an authenticated Server-Side Request Forgery issue"}