{"action":"Upgrade binarytorch/larecipe to 2.8.1 or later.","affected":[{"fixed":"2.8.1","introduced":"0"}],"component":"binarytorch/larecipe","cve_ids":["CVE-2025-53833"],"ecosystem":"Packagist","epss":0.09141,"exploited":false,"fixed_versions":["2.8.1"],"ghsa_id":"GHSA-jv7x-xhv2-p5v2","id":"tcs_01M5KF4WCZMACJ8503V154E9YA","modified_at":"2025-07-28T17:19:22.078221Z","published_at":"2025-07-14T21:22:01Z","references":["https://osv.dev/vulnerability/GHSA-jv7x-xhv2-p5v2","https://github.com/saleem-hadad/larecipe/security/advisories/GHSA-jv7x-xhv2-p5v2","https://nvd.nist.gov/vuln/detail/CVE-2025-53833","https://github.com/saleem-hadad/larecipe/pull/390","https://github.com/saleem-hadad/larecipe/commit/c1d0d56889655ce5f2645db5acf0e78d5fc3b36b","https://github.com/saleem-hadad/larecipe"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-jv7x-xhv2-p5v2","url":"https://osv.dev/vulnerability/GHSA-jv7x-xhv2-p5v2"}],"summary":"LaRecipe is vulnerable to Server-Side Template Injection attacks"}