{"action":"No fix published. Pin and monitor.","affected":[],"component":"feehi/feehicms","cve_ids":["CVE-2025-63523"],"ecosystem":"Packagist","epss":0.00263,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-qgc9-p7cj-jvh6","id":"tcs_01M5KF79P6JDDKC50X25SM2ASB","modified_at":"2025-12-02T18:19:29.306569Z","published_at":"2025-12-01T15:30:18Z","references":["https://osv.dev/vulnerability/GHSA-qgc9-p7cj-jvh6","https://nvd.nist.gov/vuln/detail/CVE-2025-63523","https://github.com/liufee/cms/issues/77","https://github.com/kiwi865/CVEs/blob/main/CVE-2025-63523.md","https://github.com/liufee/cms"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-qgc9-p7cj-jvh6","url":"https://osv.dev/vulnerability/GHSA-qgc9-p7cj-jvh6"}],"summary":"FeehiCMS fails to enforce server-side immutability"}