{"action":"Upgrade unopim/unopim to 0.3.1 or later.","affected":[{"fixed":"0.3.1","introduced":"0"}],"component":"unopim/unopim","cve_ids":["CVE-2025-55745"],"ecosystem":"Packagist","epss":0.00632,"exploited":false,"fixed_versions":["0.3.1"],"ghsa_id":"GHSA-74rg-6f92-g6wx","id":"tcs_01M5KEXPN365HA78M8SK7K600D","modified_at":"2025-08-22T21:35:38.961217Z","published_at":"2025-08-22T16:50:05Z","references":["https://osv.dev/vulnerability/GHSA-74rg-6f92-g6wx","https://github.com/unopim/unopim/security/advisories/GHSA-74rg-6f92-g6wx","https://nvd.nist.gov/vuln/detail/CVE-2025-55745","https://github.com/unopim/unopim/commit/8325b78567411ad78d44c0385f192360e608ff71","https://github.com/unopim/unopim/commit/b25db9496fc147842a519d1dd42ec03c3bf00a34","https://drive.proton.me/urls/3TP1QEMXNC#2PAy7OkVqdP3","https://github.com/unopim/unopim"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-74rg-6f92-g6wx","url":"https://osv.dev/vulnerability/GHSA-74rg-6f92-g6wx"},{"source":"nvd","source_id":"CVE-2025-55745","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55745"}],"summary":"UnoPim has CSV Injection on Quick Export feature"}