{"action":"Upgrade @finos/git-proxy to 1.19.2 or later.","affected":[{"fixed":"1.19.2","introduced":"0"}],"component":"@finos/git-proxy","cve_ids":["CVE-2025-54585"],"ecosystem":"npm","epss":0.00392,"exploited":false,"fixed_versions":["1.19.2"],"ghsa_id":"GHSA-39p2-8hq9-fwj6","id":"tcs_01M5KEWV396KHPM4S401F9MFX3","modified_at":"2025-07-31T11:18:46Z","published_at":"2025-07-30T16:40:35Z","references":["https://osv.dev/vulnerability/GHSA-39p2-8hq9-fwj6","https://github.com/finos/git-proxy/security/advisories/GHSA-39p2-8hq9-fwj6","https://nvd.nist.gov/vuln/detail/CVE-2025-54585","https://github.com/finos/git-proxy/commit/a620a2f33c39c78e01783a274580bf822af3cc3a","https://github.com/finos/git-proxy/commit/f99fe42082eab0970e4cd0acdc3421a527a7e531","https://github.com/finos/git-proxy","https://github.com/finos/git-proxy/releases/tag/v1.19.2"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-39p2-8hq9-fwj6","url":"https://osv.dev/vulnerability/GHSA-39p2-8hq9-fwj6"},{"source":"nvd","source_id":"CVE-2025-54585","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54585"}],"summary":"GitProxy New Branch Approval Exploit"}