{"action":"Upgrade unopim/unopim to 0.2.1 or later.","affected":[{"fixed":"0.2.1","introduced":"0"}],"component":"unopim/unopim","cve_ids":["CVE-2025-55744"],"ecosystem":"Packagist","epss":0.00153,"exploited":false,"fixed_versions":["0.2.1"],"ghsa_id":"GHSA-287x-6r2h-f9mw","id":"tcs_01M5KERQGKM3H2YW4VDN4949FW","modified_at":"2025-08-21T20:14:37.569286Z","published_at":"2025-08-21T14:27:18Z","references":["https://osv.dev/vulnerability/GHSA-287x-6r2h-f9mw","https://github.com/unopim/unopim/security/advisories/GHSA-287x-6r2h-f9mw","https://nvd.nist.gov/vuln/detail/CVE-2025-55744","https://drive.proton.me/urls/VXNDKQ4WKR#LpvE777hl8OJ","https://github.com/unopim/unopim"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-287x-6r2h-f9mw","url":"https://osv.dev/vulnerability/GHSA-287x-6r2h-f9mw"},{"source":"nvd","source_id":"CVE-2025-55744","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55744"}],"summary":"UnoPim vulnerable to CSRF on Product edit feature and creation of other types"}