{"action":"Upgrade github.com/nuclio/nuclio to 0.0.0-20260513101907-1915cd26d514 or later.","affected":[{"introduced":"0"}],"component":"github.com/nuclio/nuclio","cve_ids":["CVE-2026-45730"],"ecosystem":"Go","epss":0.00479,"exploited":false,"fixed_versions":["0.0.0-20260513101907-1915cd26d514"],"ghsa_id":"GHSA-m8xg-8xg9-mxhm","id":"tcs_01M5KFFJQ49S1745NQ0FXCKT1N","modified_at":"2026-06-25T23:11:16.108992239Z","published_at":"2026-06-04T15:05:56Z","references":["https://osv.dev/vulnerability/GHSA-m8xg-8xg9-mxhm","https://github.com/nuclio/nuclio/security/advisories/GHSA-m8xg-8xg9-mxhm","https://github.com/nuclio/nuclio/pull/4107","https://github.com/nuclio/nuclio/commit/1915cd26d514dcdd487517d4be56673fc02298e0","https://github.com/nuclio/nuclio","https://github.com/nuclio/nuclio/releases/tag/1.16.0"],"severity":{"label":"high","score":8.3},"sources":[{"source":"osv","source_id":"GHSA-m8xg-8xg9-mxhm","url":"https://osv.dev/vulnerability/GHSA-m8xg-8xg9-mxhm"}],"summary":"Nuclio: Missing authorization on project write paths allows any authenticated user to modify or delete any project"}