{"action":"Upgrade bacula-web/bacula-web to 9.7.1 or later.","affected":[{"fixed":"9.7.1","introduced":"0"}],"component":"bacula-web/bacula-web","cve_ids":["CVE-2025-45346"],"ecosystem":"Packagist","epss":0.00881,"exploited":false,"fixed_versions":["9.7.1"],"ghsa_id":"GHSA-hq25-vp56-qr86","id":"tcs_01M5KF3T8HKQ1MB25SQ2FJ9556","modified_at":"2025-07-30T14:42:24.057177Z","published_at":"2025-07-29T21:30:44Z","references":["https://osv.dev/vulnerability/GHSA-hq25-vp56-qr86","https://nvd.nist.gov/vuln/detail/CVE-2025-45346","https://github.com/bacula-web/bacula-web/commit/ad5d94809f17994a61496ecfec9cd3a16ac14a5f","https://github.com/bacula-web/bacula-web","https://github.com/bacula-web/bacula-web/releases/tag/v9.7.1"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-hq25-vp56-qr86","url":"https://osv.dev/vulnerability/GHSA-hq25-vp56-qr86"}],"summary":"Bacula-web SQL Injection Vulnerability"}