{"action":"Upgrade billz/raspap-webgui to 3.3.6 or later.","affected":[{"fixed":"3.3.6","introduced":"0"}],"component":"billz/raspap-webgui","cve_ids":["CVE-2025-44163"],"ecosystem":"Packagist","epss":0.00604,"exploited":false,"fixed_versions":["3.3.6"],"ghsa_id":"GHSA-277f-37gw-9gmq","id":"tcs_01M5KERN6HSNJHH0T0Q9X1F4WP","modified_at":"2025-06-30T13:11:57.694625Z","published_at":"2025-06-27T15:31:24Z","references":["https://osv.dev/vulnerability/GHSA-277f-37gw-9gmq","https://nvd.nist.gov/vuln/detail/CVE-2025-44163","https://github.com/RaspAP/raspap-webgui/commit/eb53c46c336384d78336b021adea94d9257e1d67","https://gist.github.com/YichaoXu/3694f039a3d1b973efd068e4dc662a41","https://github.com/RaspAP/raspap-webgui","https://github.com/RaspAP/raspap-webgui/blob/125ae7a39ad7c9a71250d3b3e349fd767687ff8d/ajax/networking/get_wgkey.php#L9"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-277f-37gw-9gmq","url":"https://osv.dev/vulnerability/GHSA-277f-37gw-9gmq"},{"source":"nvd","source_id":"CVE-2025-44163","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-44163"}],"summary":"raspap-webgui has a Directory Traversal vulnerability"}