{"action":"Upgrade showdoc/showdoc to 2.8.7 or later.","affected":[{"fixed":"2.8.7","introduced":"0"}],"component":"showdoc/showdoc","cve_ids":["CVE-2025-0520"],"ecosystem":"Packagist","epss":0.02647,"exploited":false,"fixed_versions":["2.8.7"],"ghsa_id":"GHSA-6jmr-r7p6-f5wr","id":"tcs_01M5KEX5SHVC0382V4PMYJPG4K","modified_at":"2025-11-05T20:31:40.231416Z","published_at":"2025-04-29T21:31:55Z","references":["https://osv.dev/vulnerability/GHSA-6jmr-r7p6-f5wr","https://nvd.nist.gov/vuln/detail/CVE-2025-0520","https://github.com/star7th/showdoc/pull/1059","https://github.com/star7th/showdoc","https://github.com/vulhub/vulhub/tree/master/showdoc/CNVD-2020-26585","https://www.cnvd.org.cn/flaw/show/CNVD-2020-26585","https://www.vulncheck.com/advisories/showdoc-unauthenticated-file-upload-rce"],"severity":{"label":"critical","score":9.4},"sources":[{"source":"osv","source_id":"GHSA-6jmr-r7p6-f5wr","url":"https://osv.dev/vulnerability/GHSA-6jmr-r7p6-f5wr"},{"source":"nvd","source_id":"CVE-2025-0520","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0520"}],"summary":"ShowDoc unrestricted file upload vulnerability"}