{"action":"Upgrade getkirby/kirby to 3.9.8.3 or later.","affected":[{"fixed":"3.9.8.3","introduced":"0"},{"fixed":"3.10.1.2","introduced":"3.10.0"},{"fixed":"4.7.1","introduced":"4.0.0"}],"component":"getkirby/kirby","cve_ids":["CVE-2025-30159"],"ecosystem":"Packagist","epss":0.00714,"exploited":false,"fixed_versions":["3.9.8.3","3.10.1.2","4.7.1"],"ghsa_id":"GHSA-fw82-87p8-v6hp","id":"tcs_01M5KF23DDY3AZ9WQXYEFTCPFA","modified_at":"2025-05-13T20:29:23.907714Z","published_at":"2025-05-13T20:02:23Z","references":["https://osv.dev/vulnerability/GHSA-fw82-87p8-v6hp","https://github.com/getkirby/kirby/security/advisories/GHSA-fw82-87p8-v6hp","https://nvd.nist.gov/vuln/detail/CVE-2025-30159","https://github.com/getkirby/kirby/commit/90acf7ed6d8d9d0697f938edc0940b4a563ddbe7","https://github.com/getkirby/kirby","https://github.com/getkirby/kirby/releases/tag/3.10.1.2","https://github.com/getkirby/kirby/releases/tag/3.9.8.3","https://github.com/getkirby/kirby/releases/tag/4.7.1"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-fw82-87p8-v6hp","url":"https://osv.dev/vulnerability/GHSA-fw82-87p8-v6hp"},{"source":"nvd","source_id":"CVE-2025-30159","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-30159"}],"summary":"Kirby vulnerable to path traversal of snippet names in the `snippet()` helper"}