{"action":"Upgrade nl.nl-portal:documenten-api to 3.0.3 or later.","affected":[{"fixed":"3.0.3","introduced":"0"}],"component":"nl.nl-portal:documenten-api","cve_ids":["CVE-2026-54683"],"ecosystem":"Maven","epss":0.00423,"exploited":false,"fixed_versions":["3.0.3"],"ghsa_id":"GHSA-jr45-52cw-69h5","id":"tcs_01M5N93J9DWG0WH5M4K38H8TPJ","modified_at":"2026-06-18T17:41:30.180662Z","published_at":"2026-06-18T17:20:14Z","references":["https://osv.dev/vulnerability/GHSA-jr45-52cw-69h5","https://github.com/nl-portal/nl-portal-backend-libraries/security/advisories/GHSA-jr45-52cw-69h5","https://github.com/nl-portal/nl-portal-backend-libraries/pull/690","https://github.com/nl-portal/nl-portal-backend-libraries/commit/6e738a876ff9f581991b5b070706100b5516e183","https://github.com/nl-portal/nl-portal-backend-libraries/commit/e326e6db862f71f76dd46d3b17cbb5fa6f2fba02","https://github.com/nl-portal/nl-portal-backend-libraries"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-jr45-52cw-69h5","url":"https://osv.dev/vulnerability/GHSA-jr45-52cw-69h5"}],"summary":"NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user (incomplete fix of CVE-2026-49463)"}