{"action":"Upgrade simplesamlphp/simplesamlphp-module-casserver to 6.3.1 or later.","affected":[{"fixed":"7.0.0","introduced":"7.0.0-rc1"},{"fixed":"6.3.1","introduced":"0"}],"component":"simplesamlphp/simplesamlphp-module-casserver","cve_ids":["CVE-2025-65954"],"ecosystem":"Packagist","epss":0.00269,"exploited":false,"fixed_versions":["7.0.0","6.3.1"],"ghsa_id":"GHSA-cvrm-5hp6-h523","id":"tcs_01M5KF18ESENF3PSHQHV5W7GAM","modified_at":"2026-09-10T03:51:05.293699994Z","published_at":"2026-05-15T16:21:13Z","references":["https://osv.dev/vulnerability/GHSA-cvrm-5hp6-h523","https://github.com/simplesamlphp/simplesamlphp-module-casserver/security/advisories/GHSA-cvrm-5hp6-h523","https://nvd.nist.gov/vuln/detail/CVE-2025-65954","https://github.com/simplesamlphp/simplesamlphp-module-casserver/commit/0462f50f00b3bb300d83067d11b74146a57bb8e0","https://github.com/simplesamlphp/simplesamlphp-module-casserver/commit/fb6c6f1c7b9e757c93c5c306e1d36405e64f6dc5","https://github.com/simplesamlphp/simplesamlphp-module-casserver","https://github.com/simplesamlphp/simplesamlphp-module-casserver/blob/21418f7efbea8c4f078fd4a7d1b9eacf94dd4941/src/Controller/LogoutController.php#L104"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"GHSA-cvrm-5hp6-h523","url":"https://osv.dev/vulnerability/GHSA-cvrm-5hp6-h523"}],"summary":"SimpleSAMLphp casserver: Open Redirect in logout"}