{"action":"Upgrade mediawiki to 1:1.39.4-1 or later.","affected":[{"fixed":"1:1.39.4-1","introduced":"0"}],"component":"mediawiki","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1:1.39.4-1"],"id":"tcs_01M5NJ4X1K3FR2Y481W3W5TRHP","modified_at":"2026-10-26T18:02:19.916675387Z","published_at":"2023-08-20T18:15:09.930Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2023-36674","https://security-tracker.debian.org/tracker/CVE-2023-36674"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2023-36674#Debian:14/mediawiki","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2023-36674"}],"summary":"An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x before 1.39.4, and 1.40.x before 1.40.1. It is possible to bypass the Bad image list (aka badFile) by u"}