CVE-2026-29788

8.4 highEPSS 0.3%

High (8.4) in wikitide tsportal. EPSS 0.3% chance of exploitation in the next 30 days.

TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 30, conversion of empty strings to null allows disguising DPA reports as genuine self-deletion reports. This issue has been patched in version 30.

Severity

CVSS 4.0

8.4 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:L/SA:H

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWEs: CWE-283, CWE-1287
Published: 2026-03-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wikitide:tsportal

References

https://github.com/miraheze/TSPortal/security/advisories/GHSA-gfhq-7499-f3f2
https://issue-tracker.miraheze.org/T15053

Check your stack JSON