{"action":"Upgrade typo3/cms-core to 12.4.37 or later.","affected":[{"fixed":"12.4.37","introduced":"12.0.0"},{"fixed":"13.4.18","introduced":"13.0.0"}],"component":"typo3/cms-core","cve_ids":["CVE-2025-59015"],"ecosystem":"Packagist","epss":0.00187,"exploited":false,"fixed_versions":["12.4.37","13.4.18"],"ghsa_id":"GHSA-p5jq-5383-qvc7","id":"tcs_01M5KF62FM34A9PQ9W22JJ14YH","modified_at":"2025-09-10T21:54:22.439417Z","published_at":"2025-09-09T09:31:12Z","references":["https://osv.dev/vulnerability/GHSA-p5jq-5383-qvc7","https://nvd.nist.gov/vuln/detail/CVE-2025-59015","https://github.com/TYPO3-CMS/core/commit/d2057cc7b2c2db417a2af38c30cb9da42302ab70","https://github.com/TYPO3-CMS/core","https://typo3.org/security/advisory/typo3-core-sa-2025-019"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-p5jq-5383-qvc7","url":"https://osv.dev/vulnerability/GHSA-p5jq-5383-qvc7"}],"summary":"TYPO3 CMS uses insufficient entropy when generating passwords"}