{"action":"Upgrade yiisoft/yii to 1.1.31 or later.","affected":[{"fixed":"1.1.31","introduced":"0"}],"component":"yiisoft/yii","cve_ids":["CVE-2025-32027"],"ecosystem":"Packagist","epss":0.00245,"exploited":false,"fixed_versions":["1.1.31"],"ghsa_id":"GHSA-7r2v-8wxr-3ch5","id":"tcs_01M5KEYBV4EC67D17RKBM531YY","modified_at":"2025-04-11T14:43:22.403665Z","published_at":"2025-04-11T14:05:18Z","references":["https://osv.dev/vulnerability/GHSA-7r2v-8wxr-3ch5","https://github.com/yiisoft/yii/security/advisories/GHSA-7r2v-8wxr-3ch5","https://nvd.nist.gov/vuln/detail/CVE-2025-32027","https://github.com/yiisoft/yii/commit/d386d737861c9014269b7ed8c36c65eadb387368","https://github.com/yiisoft/yii"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-7r2v-8wxr-3ch5","url":"https://osv.dev/vulnerability/GHSA-7r2v-8wxr-3ch5"}],"summary":"Yii does not prevent XSS in scenarios where fallback error renderer is used"}