{"action":"Upgrade wwbn/avideo to 12.4 or later.","affected":[{"fixed":"12.4","introduced":"0"}],"component":"wwbn/avideo","cve_ids":["CVE-2023-25313"],"ecosystem":"Packagist","epss":0.01315,"exploited":false,"fixed_versions":["12.4"],"ghsa_id":"GHSA-pgvh-p3g4-86jw","id":"tcs_01M5KF6BX06ENJ2M1CK3GY6QFK","modified_at":"2026-07-08T06:53:11.925878339Z","published_at":"2023-02-02T01:32:42Z","references":["https://osv.dev/vulnerability/GHSA-pgvh-p3g4-86jw","https://github.com/WWBN/AVideo/security/advisories/GHSA-pgvh-p3g4-86jw","https://nvd.nist.gov/vuln/detail/CVE-2023-30842","https://github.com/WWBN/AVideo/commit/236228f15a9a31be5a0e60f05dac043682e49a5e","https://github.com/WWBN/AVideo"],"severity":{"label":"critical","score":9.6},"sources":[{"source":"osv","source_id":"GHSA-pgvh-p3g4-86jw","url":"https://osv.dev/vulnerability/GHSA-pgvh-p3g4-86jw"}],"summary":"AVideo contains Command injection when embedding a video link"}