{"action":"Upgrade codeigniter4/framework to 4.6.2 or later.","affected":[{"fixed":"4.6.2","introduced":"0"}],"component":"codeigniter4/framework","cve_ids":["CVE-2025-54418"],"ecosystem":"Packagist","epss":0.01503,"exploited":false,"fixed_versions":["4.6.2"],"ghsa_id":"GHSA-9952-gv64-x94c","id":"tcs_01M5KEZVZ79X64QPT32573NHCV","modified_at":"2025-07-28T16:57:16.639171Z","published_at":"2025-07-28T16:08:20Z","references":["https://osv.dev/vulnerability/GHSA-9952-gv64-x94c","https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-9952-gv64-x94c","https://nvd.nist.gov/vuln/detail/CVE-2025-54418","https://github.com/codeigniter4/CodeIgniter4/commit/e18120bff1da691e1d15ffc1bf553ae7411762c0","https://cwe.mitre.org/data/definitions/78.html","https://github.com/codeigniter4/CodeIgniter4","https://owasp.org/www-community/attacks/Command_Injection"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-9952-gv64-x94c","url":"https://osv.dev/vulnerability/GHSA-9952-gv64-x94c"}],"summary":"CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability"}