{"action":"Upgrade froxlor/froxlor to 2.3.8 or later.","affected":[{"fixed":"2.3.8","introduced":"0"}],"component":"froxlor/froxlor","cve_ids":["CVE-2026-54543"],"ecosystem":"Packagist","epss":0.00447,"exploited":false,"fixed_versions":["2.3.8"],"ghsa_id":"GHSA-5rw4-4665-cvwf","id":"tcs_01M5KEWCC9C4YBHBVPBTV8ZM08","modified_at":"2026-08-18T21:11:08.088435Z","published_at":"2026-08-18T20:48:04Z","references":["https://osv.dev/vulnerability/GHSA-5rw4-4665-cvwf","https://github.com/froxlor/froxlor/security/advisories/GHSA-5rw4-4665-cvwf","https://github.com/froxlor/froxlor/commit/a4f09f09fa71337b6cdff364d0a641d631a0130a","https://github.com/froxlor/froxlor","https://github.com/froxlor/froxlor/releases/tag/2.3.8"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-5rw4-4665-cvwf","url":"https://osv.dev/vulnerability/GHSA-5rw4-4665-cvwf"}],"summary":"Froxlor DomainZones.add allows DNS zone-file RR injection via record/type fields"}