{"action":"Upgrade mautic/grapes-js-builder-bundle to 4.4.18 or later.","affected":[{"fixed":"4.4.18","introduced":"4.0.0"},{"fixed":"5.2.9","introduced":"5.0.0"},{"fixed":"6.0.7","introduced":"6.0.0"}],"component":"mautic/grapes-js-builder-bundle","cve_ids":["CVE-2025-13827"],"ecosystem":"Packagist","epss":0.0042,"exploited":false,"fixed_versions":["4.4.18","5.2.9","6.0.7"],"ghsa_id":"GHSA-5xw2-57jx-pgjp","id":"tcs_01M5KEWGQTZBB5MTSCB6ZQFPMP","modified_at":"2025-12-02T21:37:53.759277Z","published_at":"2025-12-02T21:11:33Z","references":["https://osv.dev/vulnerability/GHSA-5xw2-57jx-pgjp","https://github.com/mautic/mautic/security/advisories/GHSA-5xw2-57jx-pgjp","https://nvd.nist.gov/vuln/detail/CVE-2025-13827","https://github.com/mautic/mautic"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-5xw2-57jx-pgjp","url":"https://osv.dev/vulnerability/GHSA-5xw2-57jx-pgjp"},{"source":"nvd","source_id":"CVE-2025-13827","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13827"}],"summary":"GrapesJsBuilder File Upload allows all file uploads"}