{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.5"}],"component":"wger","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-mw8f-w6p8-xrf4","id":"tcs_01M5KFRW1V17RDEAYDTSQJKBT7","modified_at":"2026-05-20T15:45:44.941558592Z","published_at":"2026-05-20T15:37:26Z","references":["https://osv.dev/vulnerability/GHSA-mw8f-w6p8-xrf4","https://github.com/wger-project/wger/security/advisories/GHSA-mw8f-w6p8-xrf4","https://github.com/wger-project/wger"],"severity":{"label":"high","score":8.5},"sources":[{"source":"osv","source_id":"GHSA-mw8f-w6p8-xrf4","url":"https://osv.dev/vulnerability/GHSA-mw8f-w6p8-xrf4"}],"summary":"wger: cross-tenant account deletion / deactivation / activation by gym.manage_gym + gym=None"}