{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.16.0"}],"component":"com.shopizer:shopizer","cve_ids":["CVE-2026-36767"],"ecosystem":"Maven","epss":0.00412,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-f5w4-7ccj-5m75","id":"tcs_01M5N8V3WMNKZ468B2J3ZRAQHK","modified_at":"2026-05-07T01:41:24.850132Z","published_at":"2026-04-30T18:30:32Z","references":["https://osv.dev/vulnerability/GHSA-f5w4-7ccj-5m75","https://nvd.nist.gov/vuln/detail/CVE-2026-36767","https://github.com/shopizer-ecommerce/shopizer/issues/1091","https://github.com/shopizer-ecommerce/shopizer"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-f5w4-7ccj-5m75","url":"https://osv.dev/vulnerability/GHSA-f5w4-7ccj-5m75"}],"summary":"Shopizer has a path traversal issue"}