{"action":"Upgrade phpoffice/math to 0.3.0 or later.","affected":[{"fixed":"0.3.0","introduced":"0"}],"component":"phpoffice/math","cve_ids":["CVE-2025-48882"],"ecosystem":"Packagist","epss":0.00496,"exploited":false,"fixed_versions":["0.3.0"],"ghsa_id":"GHSA-42hm-pq2f-3r7m","id":"tcs_01M5KETESFKSPQ5NBA53J1SN19","modified_at":"2025-05-30T21:46:10.830281Z","published_at":"2025-05-29T17:27:39Z","references":["https://osv.dev/vulnerability/GHSA-42hm-pq2f-3r7m","https://github.com/PHPOffice/Math/security/advisories/GHSA-42hm-pq2f-3r7m","https://nvd.nist.gov/vuln/detail/CVE-2025-48882","https://github.com/PHPOffice/Math/commit/fc31c8f57a7a81f962cbf389fd89f4d9d06fc99a","https://github.com/PHPOffice/Math"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-42hm-pq2f-3r7m","url":"https://osv.dev/vulnerability/GHSA-42hm-pq2f-3r7m"},{"source":"nvd","source_id":"CVE-2025-48882","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48882"}],"summary":"PHPOffice Math allows XXE when processing an XML file in the MathML format"}