{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"15.0.3"}],"component":"dolibarr/dolibarr","cve_ids":["CVE-2026-7689"],"ecosystem":"Packagist","epss":0.00145,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-jggh-5rmh-r6h5","id":"tcs_01M5KF4JBWFKP2M0WQ0KW6JTCA","modified_at":"2026-05-07T22:56:26.195557Z","published_at":"2026-05-03T12:30:26Z","references":["https://osv.dev/vulnerability/GHSA-jggh-5rmh-r6h5","https://nvd.nist.gov/vuln/detail/CVE-2026-7689","https://gist.github.com/Shaon-Xis/d6ae069fc54f006457b68a91d5a8e158","https://github.com/Dolibarr/dolibarr","https://vuldb.com/submit/801794","https://vuldb.com/vuln/360859","https://vuldb.com/vuln/360859/cti"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-jggh-5rmh-r6h5","url":"https://osv.dev/vulnerability/GHSA-jggh-5rmh-r6h5"}],"summary":"Dolibarr has Insufficient Verification of Data Authenticity"}