{"action":"Upgrade admidio/admidio to 5.0.7 or later.","affected":[{"fixed":"5.0.7","introduced":"5.0.0"}],"component":"admidio/admidio","cve_ids":["CVE-2026-32817"],"ecosystem":"Packagist","epss":0.00495,"exploited":false,"fixed_versions":["5.0.7"],"ghsa_id":"GHSA-rmpj-3x5m-9m5f","id":"tcs_01M5KF8DET80TC386APMN4SPPH","modified_at":"2026-08-13T04:12:01.304664691Z","published_at":"2026-03-16T21:18:10Z","references":["https://osv.dev/vulnerability/GHSA-rmpj-3x5m-9m5f","https://github.com/Admidio/admidio/security/advisories/GHSA-rmpj-3x5m-9m5f","https://nvd.nist.gov/vuln/detail/CVE-2026-32817","https://github.com/Admidio/admidio"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-rmpj-3x5m-9m5f","url":"https://osv.dev/vulnerability/GHSA-rmpj-3x5m-9m5f"}],"summary":"Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletion"}