PyPI/octoprint CVE-2025-64187: medium 4.4, EPSS 0.17%
OctoPrint vulnerable to XSS in Action Commands Notification and Prompt
Action: Upgrade octoprint to 1.11.4 or later.
pip install octoprint==1.11.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.11.4 | - |
Fixed versions
| 1.11.4 |
Sources
- osv: PYSEC-2026-1714
- nvd: CVE-2025-64187
- https://github.com/OctoPrint/OctoPrint/security/advisories/GHSA-crvm-xjhm-9h29
- https://github.com/OctoPrint/OctoPrint/commit/9112e07b1085f4c1ee9eefc67985809251057a44
- https://github.com/OctoPrint/OctoPrint
- https://pypi.org/project/octoprint
- https://github.com/advisories/GHSA-crvm-xjhm-9h29
CVE-2025-64187 · published · modified · JSON