{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"7.13.0"}],"component":"phppgadmin/phppgadmin","cve_ids":["CVE-2025-60799"],"ecosystem":"Packagist","epss":0.00224,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-r63p-v37q-g74c","id":"tcs_01M5KF7Y0RQ28YYFBBN0B2Z832","modified_at":"2025-11-21T18:44:00.305750Z","published_at":"2025-11-20T15:30:24Z","references":["https://osv.dev/vulnerability/GHSA-r63p-v37q-g74c","https://nvd.nist.gov/vuln/detail/CVE-2025-60799","https://github.com/phppgadmin/phppgadmin","https://github.com/phppgadmin/phppgadmin/blob/master/sql.php#L68-L76","https://github.com/pr0wl1ng/security-advisories/blob/main/CVE-2025-60799.md"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-r63p-v37q-g74c","url":"https://osv.dev/vulnerability/GHSA-r63p-v37q-g74c"}],"summary":"phppgadmin contains an incorrect access control vulnerability"}