{"action":"Upgrade unleash-server to 8.0.3 or later.","affected":[{"fixed":"8.0.3","introduced":"0"}],"component":"unleash-server","cve_ids":["CVE-2026-76910"],"ecosystem":"npm","epss":0.00414,"exploited":false,"fixed_versions":["8.0.3"],"ghsa_id":"GHSA-8xcj-9hfr-fh9j","id":"tcs_01M5KFE9WDAFETNPSBTWKZTG71","modified_at":"2026-09-22T21:00:03.639342151Z","published_at":"2026-09-22T20:34:40Z","references":["https://osv.dev/vulnerability/GHSA-8xcj-9hfr-fh9j","https://github.com/Unleash/unleash/security/advisories/GHSA-8xcj-9hfr-fh9j","https://github.com/Unleash/unleash/commit/2dc6ac0e8ba524ec7a2e9bc96a0e01d9d6f5a35a","https://github.com/Unleash/unleash","https://github.com/Unleash/unleash/releases/tag/v8.0.3"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-8xcj-9hfr-fh9j","url":"https://osv.dev/vulnerability/GHSA-8xcj-9hfr-fh9j"}],"summary":"Unleash: Clone-feature lets a user copy a feature from a project they cannot read"}