{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2018-04-22b"}],"component":"dokuwiki","cve_ids":["CVE-2019-25338"],"ecosystem":"PyPI","epss":0.00473,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KHC6MRPCYEG729NBZX829T","modified_at":"2026-05-21T15:00:12.114359118Z","published_at":"2026-02-12T23:16:07.670Z","references":["https://osv.dev/vulnerability/PYSEC-2026-57","https://download.dokuwiki.org/","https://www.dokuwiki.org/dokuwiki","https://www.vulncheck.com/advisories/dokuwiki-b-username-enumeration","https://www.exploit-db.com/exploits/47731"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-57","url":"https://osv.dev/vulnerability/PYSEC-2026-57"}],"summary":"DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames t"}