CVE-2025-62713
1 advisory.
npm/@kottster/server CVE-2025-62713: high, EPSS 0.61%
Kottster app reinitialization can be re-triggered allowing command injection in development mode
Action: Upgrade @kottster/server to 3.3.2 or later.
npm i @kottster/server@3.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.2.0 | 3.3.2 | - |
Fixed versions
| 3.3.2 |
Sources
- osv: GHSA-j3w7-9qc3-g96p
- https://github.com/kottster/kottster/security/advisories/GHSA-j3w7-9qc3-g96p
- https://nvd.nist.gov/vuln/detail/CVE-2025-62713
- https://github.com/kottster/kottster/commit/0a7d24922a23aac98372155348787670937eef89
- https://github.com/kottster/kottster
CVE-2025-62713 · published · modified · JSON