Packagist/tcg/voyager CVE-2025-32931: critical 9.1, EPSS 0.57%
DevDojo Voyager Argument Injection vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.0 | - | 1.8.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-qq2h-m2hj-hrff
- https://nvd.nist.gov/vuln/detail/CVE-2025-32931
- https://github.com/lishihihi/voyager-issue-report
- https://github.com/thedevdojo/voyager
- https://github.com/thedevdojo/voyager/blob/1.8/docs/core-concepts/compass.md
- https://github.com/thedevdojo/voyager/blob/7e7e0f4f0e115d2d9e0481a86153a1ceff194c00/resources/views/compass/includes/commands.blade.php#L11-L16
CVE-2025-32931 · published · modified · JSON