{"action":"Upgrade github.com/romitou/insatutorat to 0.0.0-20260226075457-15ae47425aed or later.","affected":[{"introduced":"0"}],"component":"github.com/romitou/insatutorat","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.0.0-20260226075457-15ae47425aed"],"ghsa_id":"GHSA-xfx2-prg5-jq3g","id":"tcs_01M5KFS2YDX9T084N9FSSSVC2H","modified_at":"2026-03-23T04:56:29.078051663Z","published_at":"2026-03-01T01:22:25Z","references":["https://osv.dev/vulnerability/GHSA-xfx2-prg5-jq3g","https://github.com/Romitou/INSATutorat/security/advisories/GHSA-xfx2-prg5-jq3g","https://github.com/Romitou/INSATutorat/commit/15ae47425aed337181f7a6c54a9d199c93b041eb","https://github.com/Romitou/INSATutorat"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-xfx2-prg5-jq3g","url":"https://osv.dev/vulnerability/GHSA-xfx2-prg5-jq3g"}],"summary":"INSATutorat has an authorization bypass vulnerability in its /api/admin/* endpoints"}