{"action":"No fix published. Pin and monitor.","affected":[],"component":"UmbracoCms","cve_ids":["CVE-2021-47776"],"ecosystem":"NuGet","epss":0.0038,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-h66j-xm43-47pp","id":"tcs_01M5N8QFCQT27DG04CAEYDDT6Q","modified_at":"2026-02-03T03:17:23.522644Z","published_at":"2026-01-15T18:31:32Z","references":["https://osv.dev/vulnerability/GHSA-h66j-xm43-47pp","https://nvd.nist.gov/vuln/detail/CVE-2021-47776","https://github.com/umbraco/Umbraco-CMS","https://our.umbraco.com","https://releases.umbraco.com/all-releases","https://www.exploit-db.com/exploits/50462"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-h66j-xm43-47pp","url":"https://osv.dev/vulnerability/GHSA-h66j-xm43-47pp"}],"summary":"Umbraco CMS contains a server-side request forgery vulnerability"}