{"action":"Upgrade github.com/seaweedfs/seaweedfs to 0.0.0-20260614205536-b13463880c1f or later.","affected":[{"fixed":"0.0.0-20260614205536-b13463880c1f","introduced":"0.0.0-20260128085517-09bb90e8dc16"}],"component":"github.com/seaweedfs/seaweedfs","cve_ids":["CVE-2026-55873"],"ecosystem":"Go","epss":0.00342,"exploited":false,"fixed_versions":["0.0.0-20260614205536-b13463880c1f"],"ghsa_id":"GHSA-hgpf-8634-g44c","id":"tcs_01M5KFCHCHBXBWWR2TCFDCPSFF","modified_at":"2026-09-02T19:55:26.604070243Z","published_at":"2026-08-28T22:16:43Z","references":["https://osv.dev/vulnerability/GHSA-hgpf-8634-g44c","https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-hgpf-8634-g44c","https://nvd.nist.gov/vuln/detail/CVE-2026-55873","https://github.com/seaweedfs/seaweedfs/pull/9961","https://github.com/seaweedfs/seaweedfs/commit/b13463880c1fa62e255c058a9228b63cc95b4b36","https://github.com/seaweedfs/seaweedfs","https://github.com/seaweedfs/seaweedfs/releases/tag/4.34"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-hgpf-8634-g44c","url":"https://osv.dev/vulnerability/GHSA-hgpf-8634-g44c"}],"summary":"SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets"}