{"action":"Upgrade org.dspace:dspace-api to 7.1 or later.","affected":[{"fixed":"7.1","introduced":"7.0"}],"component":"org.dspace:dspace-api","cve_ids":["CVE-2021-41189"],"ecosystem":"Maven","epss":0.02056,"exploited":false,"fixed_versions":["7.1"],"ghsa_id":"GHSA-cf2j-vf36-c6w8","id":"tcs_01M5N8S797FYC8RYEXV313275Q","modified_at":"2026-07-08T06:27:55.812737462Z","published_at":"2021-11-01T19:18:16Z","references":["https://osv.dev/vulnerability/GHSA-cf2j-vf36-c6w8","https://github.com/DSpace/DSpace/security/advisories/GHSA-cf2j-vf36-c6w8","https://nvd.nist.gov/vuln/detail/CVE-2021-41189","https://github.com/DSpace/DSpace/issues/7928","https://github.com/DSpace/DSpace/commit/277b499a5cd3a4f5eb2370513a1b7e4ec2a6e041","https://github.com/DSpace/DSpace/commit/c3bea16ab911606e15ae96c97a1575e1ffb14f8a","https://github.com/DSpace/DSpace"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-cf2j-vf36-c6w8","url":"https://osv.dev/vulnerability/GHSA-cf2j-vf36-c6w8"}],"summary":"Communities and collections administrators can escalate their privilege up to system administrator"}