{"action":"Upgrade joomla/database to 2.2.0 or later.","affected":[{"fixed":"3.4.0","introduced":"3.0.0"},{"fixed":"2.2.0","introduced":"1.0.0"}],"component":"joomla/database","cve_ids":["CVE-2025-25226"],"ecosystem":"Packagist","epss":0.0048,"exploited":false,"fixed_versions":["3.4.0","2.2.0"],"ghsa_id":"GHSA-44v2-prcf-pc3m","id":"tcs_01M5KETKAVS0M07XMXEQPB56A0","modified_at":"2025-06-05T06:27:18.776472Z","published_at":"2025-04-08T18:34:43Z","references":["https://osv.dev/vulnerability/GHSA-44v2-prcf-pc3m","https://nvd.nist.gov/vuln/detail/CVE-2025-25226","https://developer.joomla.org/security-centre/963-20250401-framework-sql-injection-vulnerability-in-quotenamestr-method-of-database-package.html","https://github.com/joomla-framework/database"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-44v2-prcf-pc3m","url":"https://osv.dev/vulnerability/GHSA-44v2-prcf-pc3m"},{"source":"nvd","source_id":"CVE-2025-25226","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-25226"}],"summary":"Joomla Framework Database Package Vulnerable to SQL Injection"}