Threats affecting pkg:github/photoprism/photoprism

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2026-57945PhotoPrism before version 260601-a7d098548 has a broken access control vulnerability that allows authenticated non-admin users to modify other users' profile information Medium4.3EPSS 0.3%2026-06-29GCVE DatabaseCVE-2026-57945 PhotoPrism before version 260601-a7d098548 has a broken access control vulnerability that allows authenticated non-admin users to modify other users' profile information. This occurs due to missing validation linking session identity to user identifiers in the PUT users API endpoint, enabling unauthorized profile overwrites. EPSS 0.3%Vulnerability CWE-639 #ghsa-2h2f-frxq-r68w	GCVE Database	2026-06-29

Page 1 of 1