{"action":"Upgrade cockpit-hq/cockpit to 2.11.4 or later.","affected":[{"fixed":"2.11.4","introduced":"0"}],"component":"cockpit-hq/cockpit","cve_ids":["CVE-2025-7053"],"ecosystem":"Packagist","epss":0.00363,"exploited":false,"fixed_versions":["2.11.4"],"ghsa_id":"GHSA-j4rj-fgcq-wmqp","id":"tcs_01M5KF46ZKY6YZ7621SKT1KNDY","modified_at":"2025-07-04T13:42:18.655631Z","published_at":"2025-07-04T03:30:32Z","references":["https://osv.dev/vulnerability/GHSA-j4rj-fgcq-wmqp","https://nvd.nist.gov/vuln/detail/CVE-2025-7053","https://github.com/Cockpit-HQ/Cockpit/commit/bdcd5e3bc651c0839c7eea807f3eb6af856dbc76","https://github.com/Cockpit-HQ/Cockpit","https://github.com/Cockpit-HQ/Cockpit/releases/tag/2.11.4","https://vuldb.com/?ctiid.314819","https://vuldb.com/?id.314819","https://vuldb.com/?submit.605594"],"severity":{"label":"low","score":3.5},"sources":[{"source":"osv","source_id":"GHSA-j4rj-fgcq-wmqp","url":"https://osv.dev/vulnerability/GHSA-j4rj-fgcq-wmqp"}],"summary":"Cockpit - Content Platform vulnerable to XSS through name or email argument names"}