{"action":"Upgrade craftcms/cms to 4.16.6 or later.","affected":[{"fixed":"4.16.6","introduced":"4.0.0-RC1"},{"fixed":"5.8.7","introduced":"5.0.0-RC1"}],"component":"craftcms/cms","cve_ids":["CVE-2025-57811"],"ecosystem":"Packagist","epss":0.00864,"exploited":false,"fixed_versions":["4.16.6","5.8.7"],"ghsa_id":"GHSA-crcq-738g-pqvc","id":"tcs_01M5KF15RTS3VFZ2SFK2CESKQ0","modified_at":"2025-11-27T08:05:02.275622Z","published_at":"2025-08-25T20:42:45Z","references":["https://osv.dev/vulnerability/GHSA-crcq-738g-pqvc","https://github.com/craftcms/cms/security/advisories/GHSA-crcq-738g-pqvc","https://github.com/craftcms/cms/security/advisories/GHSA-f3cw-hg6r-chfv","https://nvd.nist.gov/vuln/detail/CVE-2025-57811","https://github.com/craftcms/cms/pull/17612","https://github.com/craftcms/cms/commit/e77f8a287dcdda41f1724f525d03542f18566cbc","https://github.com/craftcms/cms"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-crcq-738g-pqvc","url":"https://osv.dev/vulnerability/GHSA-crcq-738g-pqvc"}],"summary":"Craft CMS Potential Remote Code Execution via Twig SSTI"}