{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.7.2"}],"component":"ectouch/ectouch","cve_ids":["CVE-2022-25098"],"ecosystem":"Packagist","epss":0.00987,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-ph62-8768-r87v","id":"tcs_01M5KF6CSGTG2XFWWTRNQ6QEM7","modified_at":"2026-09-10T03:49:17.088938392Z","published_at":"2022-02-25T00:01:04Z","references":["https://osv.dev/vulnerability/GHSA-ph62-8768-r87v","https://nvd.nist.gov/vuln/detail/CVE-2022-25098","https://github.com/dota-st/Vulnerability/blob/master/ECTouchV2.md","https://github.com/ectouch/ectouch"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-ph62-8768-r87v","url":"https://osv.dev/vulnerability/GHSA-ph62-8768-r87v"}],"summary":"Arbitrary file delete in ectouch/ectouch"}