{"action":"Upgrade librenms/librenms to 25.10.0 or later.","affected":[{"fixed":"25.10.0","introduced":"0"}],"component":"librenms/librenms","cve_ids":["CVE-2025-62412"],"ecosystem":"Packagist","epss":0.00276,"exploited":false,"fixed_versions":["25.10.0"],"ghsa_id":"GHSA-6g2v-66ch-6xmh","id":"tcs_01M5KEX13Z69FQY563T0C7CBSR","modified_at":"2025-10-16T20:47:31.000862Z","published_at":"2025-10-16T20:18:32Z","references":["https://osv.dev/vulnerability/GHSA-6g2v-66ch-6xmh","https://github.com/librenms/librenms/security/advisories/GHSA-6g2v-66ch-6xmh","https://nvd.nist.gov/vuln/detail/CVE-2025-62412","https://github.com/librenms/librenms/commit/dccdf6769976a974d70f06a7ce8d5a846b29db6f","https://github.com/librenms/librenms","https://github.com/librenms/librenms/releases/tag/25.10.0"],"severity":{"label":"low","score":3.8},"sources":[{"source":"osv","source_id":"GHSA-6g2v-66ch-6xmh","url":"https://osv.dev/vulnerability/GHSA-6g2v-66ch-6xmh"}],"summary":"LibreNMS alert-rules has a Cross-Site Scripting Vulnerability"}