{"action":"Upgrade poweradmin/poweradmin to 3.9.11 or later.","affected":[{"fixed":"3.9.11","introduced":"3.0.0"},{"fixed":"4.2.5","introduced":"4.0.0"},{"fixed":"4.3.4","introduced":"4.3.0"}],"component":"poweradmin/poweradmin","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["3.9.11","4.2.5","4.3.4"],"ghsa_id":"GHSA-rm67-g9ch-vxff","id":"tcs_01M5KF8CMJ3HJ4SQJEEGESJ42X","modified_at":"2026-07-24T22:00:28.386574485Z","published_at":"2026-07-24T21:55:15Z","references":["https://osv.dev/vulnerability/GHSA-rm67-g9ch-vxff","https://github.com/poweradmin/poweradmin/security/advisories/GHSA-rm67-g9ch-vxff","https://github.com/poweradmin/poweradmin/commit/12651facf49a6d9ebeb38f01e65f4aa5bfbc4da0","https://github.com/poweradmin/poweradmin/commit/88f443d0bde9812ff8d00c094882c8b8e7303c49","https://github.com/poweradmin/poweradmin/commit/e021067157491ea70b8e333dc3f6a1ddf7e8e746","https://github.com/poweradmin/poweradmin","https://github.com/poweradmin/poweradmin/releases/tag/v3.9.11","https://github.com/poweradmin/poweradmin/releases/tag/v4.2.5","https://github.com/poweradmin/poweradmin/releases/tag/v4.3.4"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-rm67-g9ch-vxff","url":"https://osv.dev/vulnerability/GHSA-rm67-g9ch-vxff"}],"summary":"Poweradmin: Broken access control (IDOR): any zone owner can modify DNS records in zones they do not own"}