CVE-2025-10097
1 advisory.
npm/simstudio CVE-2025-10097: medium 6.3, EPSS 0.78%
SimStudioAI: A function in route.ts is vulnerable to Code Injection
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.1.19 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-g4c9-f287-64xg
- https://nvd.nist.gov/vuln/detail/CVE-2025-10097
- https://github.com/simstudioai/sim/issues/961
- https://github.com/simstudioai/sim/issues/961#issuecomment-3215578979
- https://github.com/simstudioai/sim/pull/1149/commits/3f790867427275ebae3b3dc75cf1d93d912ac9ca
- https://github.com/simstudioai/sim
- https://vuldb.com/?ctiid.323058
- https://vuldb.com/?id.323058
- https://vuldb.com/?submit.644954
CVE-2025-10097 · published · modified · JSON