{"action":"Upgrade pyrofork to 2.3.69 or later.","affected":[{"fixed":"2.3.69","introduced":"0"}],"component":"pyrofork","cve_ids":["CVE-2025-67720"],"ecosystem":"PyPI","epss":0.00318,"exploited":false,"fixed_versions":["2.3.69"],"ghsa_id":"GHSA-6h2f-wjhf-4wjx","id":"tcs_01M5KF3DJ1EZE374CCW3RBAA59","modified_at":"2026-07-07T17:57:30.437770775Z","published_at":"2025-12-10T20:21:54Z","references":["https://osv.dev/vulnerability/GHSA-6h2f-wjhf-4wjx","https://github.com/Mayuri-Chan/pyrofork/security/advisories/GHSA-6h2f-wjhf-4wjx","https://nvd.nist.gov/vuln/detail/CVE-2025-67720","https://github.com/Mayuri-Chan/pyrofork/commit/2f2d515575cc9c360bd74340a61a1d2b1e1f1f95","https://github.com/Mayuri-Chan/pyrofork"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-6h2f-wjhf-4wjx","url":"https://osv.dev/vulnerability/GHSA-6h2f-wjhf-4wjx"}],"summary":"Pyrofork has a Path Traversal in download_media Method"}