{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.4.9"}],"component":"cadmium-org/cadmium-cms","cve_ids":["CVE-2025-51511"],"ecosystem":"Packagist","epss":0.00381,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-qx44-p258-3c2v","id":"tcs_01M5KF7Q2VTD134S2VG00GENRW","modified_at":"2025-12-23T20:27:05.752207Z","published_at":"2025-12-23T18:30:27Z","references":["https://osv.dev/vulnerability/GHSA-qx44-p258-3c2v","https://nvd.nist.gov/vuln/detail/CVE-2025-51511","https://github.com/cadmium-org/cadmium-cms/issues/23","https://github.com/cadmium-org/cadmium-cms"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-qx44-p258-3c2v","url":"https://osv.dev/vulnerability/GHSA-qx44-p258-3c2v"},{"source":"nvd","source_id":"CVE-2025-51511","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-51511"}],"summary":"Cadmium CMS has a background arbitrary file upload vulnerability"}