Packagist/mineadmin/mineadmin CVE-2025-65854: critical 9.8, EPSS 0.50%
MineAdmin has an insecure default password
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.0.9 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-x6mh-4w8x-p34v
- https://nvd.nist.gov/vuln/detail/CVE-2025-65854
- https://gist.github.com/SourByte05/1a6c6b08ac47c5d58eb7dd4422cc23b7
- https://github.com/mineadmin/mine-core/blob/7994da7f5cd0778eb9aadd550c50c259cc1d1048/src/Command/InstallProjectCommand.php#L123
- https://github.com/mineadmin/mineadmin
- http://mineadmin.com
CVE-2025-65854 · published · modified · JSON