Packagist/novosga/novosga CVE-2025-11322: low 3.7, EPSS 0.36%

NovoSGA: Manipulation of User Creation Page can lead to weak password requirements

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-xgr2-5837-hf48
• https://nvd.nist.gov/vuln/detail/CVE-2025-11322
• https://github.com/marcelomulder/CVE/blob/main/NovoSga/CVE-2025-11322.md
• https://github.com/marcelomulder/CVE/blob/main/NovoSga/Weak%20Password%20Policy%20in%20Novosga.md
• https://github.com/novosga/novosga
• https://vuldb.com/?ctiid.327203
• https://vuldb.com/?id.327203
• https://vuldb.com/?submit.664517

CVE-2025-11322 · published 2025-10-06T06:32:58Z · modified 2025-10-07T13:57:23.831534Z · JSON