{"action":"Upgrade librenms/librenms to 25.10.0 or later.","affected":[{"fixed":"25.10.0","introduced":"0"}],"component":"librenms/librenms","cve_ids":["CVE-2025-62411"],"ecosystem":"Packagist","epss":0.12717,"exploited":false,"fixed_versions":["25.10.0"],"ghsa_id":"GHSA-frc6-pwgr-c28w","id":"tcs_01M5KF219ZMGG6R6MQTH3982PQ","modified_at":"2025-10-16T19:53:53.680712Z","published_at":"2025-10-16T16:52:13Z","references":["https://osv.dev/vulnerability/GHSA-frc6-pwgr-c28w","https://github.com/librenms/librenms/security/advisories/GHSA-frc6-pwgr-c28w","https://nvd.nist.gov/vuln/detail/CVE-2025-62411","https://github.com/librenms/librenms/commit/706a77085f4d5964f7de9444208ef707e1f79450","https://github.com/librenms/librenms/commit/e1ead366239b57e88f9a06d4f7c213b1e2530cd8","https://github.com/librenms/librenms","https://github.com/librenms/librenms/releases/tag/25.10.0"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-frc6-pwgr-c28w","url":"https://osv.dev/vulnerability/GHSA-frc6-pwgr-c28w"}],"summary":"LibreNMS has a Stored XSS vulnerability in its Alert Transport name field"}