{"action":"Upgrade privatebin/privatebin to 2.0.3 or later.","affected":[{"fixed":"2.0.3","introduced":"1.7.7"}],"component":"privatebin/privatebin","cve_ids":["CVE-2025-64714"],"ecosystem":"Packagist","epss":0.00529,"exploited":false,"fixed_versions":["2.0.3"],"ghsa_id":"GHSA-g2j9-g8r5-rg82","id":"tcs_01M5KF26ERJP6X6H49B8Z6YWZ3","modified_at":"2025-11-14T21:07:18.428041Z","published_at":"2025-11-14T20:33:35Z","references":["https://osv.dev/vulnerability/GHSA-g2j9-g8r5-rg82","https://github.com/PrivateBin/PrivateBin/security/advisories/GHSA-g2j9-g8r5-rg82","https://nvd.nist.gov/vuln/detail/CVE-2025-64714","https://github.com/PrivateBin/PrivateBin/commit/4434dbf73ac53217fda0f90d8cf9b6110f8acc4f","https://github.com/PrivateBin/PrivateBin"],"severity":{"label":"medium","score":5.8},"sources":[{"source":"osv","source_id":"GHSA-g2j9-g8r5-rg82","url":"https://osv.dev/vulnerability/GHSA-g2j9-g8r5-rg82"}],"summary":"PrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal"}