{"action":"Upgrade typo3/cms-webhooks to 12.4.31 or later.","affected":[{"fixed":"12.4.31","introduced":"12.0.0"},{"fixed":"13.4.12","introduced":"13.0.0"}],"component":"typo3/cms-webhooks","cve_ids":["CVE-2025-47936"],"ecosystem":"Packagist","epss":0.00272,"exploited":false,"fixed_versions":["12.4.31","13.4.12"],"ghsa_id":"GHSA-p4xx-m758-3hpx","id":"tcs_01M5KF61EPFMDVC0VGBHW3QDTV","modified_at":"2025-05-20T20:13:27.507693Z","published_at":"2025-05-20T19:20:55Z","references":["https://osv.dev/vulnerability/GHSA-p4xx-m758-3hpx","https://github.com/TYPO3/typo3/security/advisories/GHSA-p4xx-m758-3hpx","https://nvd.nist.gov/vuln/detail/CVE-2025-47936","https://github.com/TYPO3-CMS/webhooks/commit/0df8b8adae577876fa253679c9ef3fe2a7ee64fd","https://github.com/TYPO3-CMS/webhooks","https://typo3.org/security/advisory/typo3-core-sa-2025-012"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"GHSA-p4xx-m758-3hpx","url":"https://osv.dev/vulnerability/GHSA-p4xx-m758-3hpx"}],"summary":"TYPO3 CMS Webhooks Server Side Request Forgery"}