{"action":"Upgrade wagtail to the fixed version for your line (see fixed_versions).","affected":[{"fixed":"7.0.9","introduced":"0"},{"fixed":"7.3.4","introduced":"7.1rc1"},{"fixed":"7.4.3","introduced":"7.4rc1"},{"fixed":"8.0rc2","introduced":"8.0rc1"}],"component":"wagtail","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["7.0.9","7.3.4","7.4.3","8.0rc2"],"ghsa_id":"GHSA-jm5p-837g-rv8g","id":"tcs_01M5KFP6QTN4Q52VJM6166DHB6","modified_at":"2026-10-26T15:00:05.236346348Z","published_at":"2026-08-20T18:45:27Z","references":["https://osv.dev/vulnerability/GHSA-jm5p-837g-rv8g","https://github.com/wagtail/wagtail/security/advisories/GHSA-jm5p-837g-rv8g","https://github.com/wagtail/wagtail","https://github.com/wagtail/wagtail/releases/tag/v7.0.9","https://github.com/wagtail/wagtail/releases/tag/v7.3.4","https://github.com/wagtail/wagtail/releases/tag/v7.4.3","https://github.com/wagtail/wagtail/releases/tag/v8.0rc2"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-jm5p-837g-rv8g","url":"https://osv.dev/vulnerability/GHSA-jm5p-837g-rv8g"}],"summary":"Wagtail: Improper restriction handling on Page translation API endpoint"}