{"action":"Upgrade github.com/navidrome/navidrome to 0.56.0 or later.","affected":[{"fixed":"0.56.0","introduced":"0"}],"component":"github.com/navidrome/navidrome","cve_ids":["CVE-2025-48948"],"ecosystem":"Go","epss":0.0051,"exploited":false,"fixed_versions":["0.56.0"],"ghsa_id":"GHSA-f238-rggp-82m3","id":"tcs_01M5KF83BE2YTGSZG7N19C6DBY","modified_at":"2025-06-03T18:57:06.699744Z","published_at":"2025-05-29T22:36:49Z","references":["https://osv.dev/vulnerability/GHSA-f238-rggp-82m3","https://github.com/navidrome/navidrome/security/advisories/GHSA-f238-rggp-82m3","https://nvd.nist.gov/vuln/detail/CVE-2025-48948","https://github.com/navidrome/navidrome/pull/4096","https://github.com/navidrome/navidrome/commit/e5438552c63fecb6284e1b179dddae91ede869c8","https://github.com/navidrome/navidrome"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-f238-rggp-82m3","url":"https://osv.dev/vulnerability/GHSA-f238-rggp-82m3"},{"source":"nvd","source_id":"CVE-2025-48948","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48948"}],"summary":"Navidrome Transcoding Permission Bypass Vulnerability Report"}