{"id":"CVE-2018-19133","aliases":["GHSA-p6m5-x83r-hqmr"],"url":"https://o3.security/vulnerability/CVE-2018-19133","summary":"Flarum Core Leaks PII","details":"In Flarum Core 0.1.0-beta.7.1, a serious leak can get everyone's email address.","published":"2018-11-09T11:29:04.017Z","modified":"2026-07-08T15:09:54.074823Z","cvss":{"score":5.3,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},"epss":{"score":0.01167,"percentile":0.65229,"asOf":"2026-09-04"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"flarum/framework","fixedVersion":null}],"fix":{"url":"https://github.com/flarum/framework/commit/e99f7fcdace74211bec5627e6adf20ddf7dad2a7","label":"flarum/framework@e99f7fc"},"references":[{"type":"FIX","url":"https://github.com/flarum/core/issues/1628"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19133"},{"type":"WEB","url":"https://github.com/flarum/framework/commit/e99f7fcdace74211bec5627e6adf20ddf7dad2a7"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T15:09:54.074823Z"}}