{"action":"Upgrade lomkit/laravel-rest-api to 2.13.0 or later.","affected":[{"fixed":"2.13.0","introduced":"0"}],"component":"lomkit/laravel-rest-api","cve_ids":["CVE-2025-48490"],"ecosystem":"Packagist","epss":0.00637,"exploited":false,"fixed_versions":["2.13.0"],"ghsa_id":"GHSA-69rh-hccr-cxrj","id":"tcs_01M5KEWXV7NPFP5PP0384QXAYB","modified_at":"2025-05-30T15:40:00.632431Z","published_at":"2025-05-27T19:47:00Z","references":["https://osv.dev/vulnerability/GHSA-69rh-hccr-cxrj","https://github.com/Lomkit/laravel-rest-api/security/advisories/GHSA-69rh-hccr-cxrj","https://nvd.nist.gov/vuln/detail/CVE-2025-48490","https://github.com/Lomkit/laravel-rest-api/pull/172","https://github.com/Lomkit/laravel-rest-api/commit/88b14587b4efd7e59d7379658c606d325bb513b4","https://github.com/Lomkit/laravel-rest-api"],"severity":{"label":"medium","score":6.6},"sources":[{"source":"osv","source_id":"GHSA-69rh-hccr-cxrj","url":"https://osv.dev/vulnerability/GHSA-69rh-hccr-cxrj"},{"source":"nvd","source_id":"CVE-2025-48490","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48490"}],"summary":"Laravel Rest Api has a Search Validation Bypass"}