{"action":"Upgrade ibexa/user to 5.0.3 or later.","affected":[{"fixed":"5.0.3","introduced":"5.0.0"}],"component":"ibexa/user","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["5.0.3"],"ghsa_id":"GHSA-q3x8-6898-23g3","id":"tcs_01M5KF6WKXW481NR7NH22SJW2S","modified_at":"2025-10-17T18:16:40.113403Z","published_at":"2025-10-17T17:58:08Z","references":["https://osv.dev/vulnerability/GHSA-q3x8-6898-23g3","https://github.com/ibexa/user/security/advisories/GHSA-q3x8-6898-23g3","https://developers.ibexa.co/security-advisories/ibexa-sa-2025-004-xss-and-enumeration-vulnerabilities-in-back-office","https://github.com/ibexa/user"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-q3x8-6898-23g3","url":"https://osv.dev/vulnerability/GHSA-q3x8-6898-23g3"}],"summary":"ibexa/user login enumerates user accounts"}