{"action":"Upgrade wallabag/wallabag to 2.6.3 or later.","affected":[{"fixed":"2.6.3","introduced":"2.0.0-alpha.1"}],"component":"wallabag/wallabag","cve_ids":["CVE-2023-4454"],"ecosystem":"Packagist","epss":0.00268,"exploited":false,"fixed_versions":["2.6.3"],"ghsa_id":"GHSA-p8gp-899c-jvq9","id":"tcs_01M5KF670W2K7DPREY90PMB1H0","modified_at":"2024-02-16T08:13:20.539734Z","published_at":"2023-08-21T20:28:06Z","references":["https://osv.dev/vulnerability/GHSA-p8gp-899c-jvq9","https://github.com/wallabag/wallabag/security/advisories/GHSA-p8gp-899c-jvq9","https://github.com/wallabag/wallabag/commit/78b0b55c40511e1f22d5bbb4897aa10fca68441c","https://github.com/wallabag/wallabag","https://huntr.dev/bounties/4ee0ef74-e4d4-46e7-a05c-076bce522299"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GHSA-p8gp-899c-jvq9","url":"https://osv.dev/vulnerability/GHSA-p8gp-899c-jvq9"}],"summary":"Wallabag user can reset data unintentionally"}