PyPI/webssh CVE-2025-7885: medium 4.3, EPSS 0.56%
WebSSH Cross-site Scripting vulnerability
Action: Upgrade webssh to 1.6.3 or later.
pip install webssh==1.6.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.3 | - |
Fixed versions
| 1.6.3 |
Sources
- osv: GHSA-9cg4-9hv5-3376
- https://nvd.nist.gov/vuln/detail/CVE-2025-7885
- https://github.com/huashengdun/webssh/issues/410
- https://github.com/huashengdun/webssh/commit/a7a704f111391c82efc1bacf89693ff45bda7f5f
- https://github.com/4m3rr0r/PoCVulDb/blob/main/CVE-2025-7885.md
- https://github.com/huashengdun/webssh
- https://github.com/pypa/advisory-database/tree/main/vulns/webssh/PYSEC-2025-234.yaml
- https://vuldb.com/?ctiid.317000
- https://vuldb.com/?id.317000
- https://vuldb.com/?submit.613610
CVE-2025-7885 · published · modified · JSON