{"action":"Upgrade lemmy_server to 0.19.11 or later.","affected":[{"fixed":"0.19.11","introduced":"0.17.0"}],"component":"lemmy_server","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.19.11"],"ghsa_id":"GHSA-wr2m-38xh-rpc9","id":"tcs_01M5KF466DDM8WDAPK07XVGGTJ","modified_at":"2025-04-08T17:38:59Z","published_at":"2025-04-08T17:38:59Z","references":["https://osv.dev/vulnerability/GHSA-wr2m-38xh-rpc9","https://github.com/LemmyNet/lemmy/security/advisories/GHSA-wr2m-38xh-rpc9","https://github.com/LemmyNet/lemmy/pull/1809","https://github.com/LemmyNet/lemmy/pull/3927","https://github.com/LemmyNet/lemmy/pull/5566","https://github.com/LemmyNet/lemmy"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-wr2m-38xh-rpc9","url":"https://osv.dev/vulnerability/GHSA-wr2m-38xh-rpc9"}],"summary":"Lemmy user purging users or communities or banning users can delete images they didn't upload/exclusively use"}