Packagist/devcode-it/openstamanager CVE-2025-69212: high 8.8, EPSS 1.92%
OpenSTAManager has an OS Command Injection in P7M File Processing
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.9.8 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-25fp-8w8p-mx36
- nvd: CVE-2025-69212
- https://github.com/devcode-it/openstamanager/security/advisories/GHSA-25fp-8w8p-mx36
- https://github.com/devcode-it/openstamanager
CVE-2025-69212 · published · modified · JSON