CVE Catalog
CVE-2026-68754
MediumCVSS 6.5Summary
A repository publisher without delete permission may modify protected package content under specific conditions.
Risk Assessment
This could lead to unauthorized changes in packages, compromising repository integrity and potentially introducing malicious code.
Recommendation
Restrict publisher permissions and regularly audit package modification rights.
Original NVD description (English source)
A repository publisher without delete permission may modify protected package content under specific conditions.