{"action":"Upgrade alt-design/alt-redirect to 1.6.4 or later.","affected":[{"fixed":"1.6.4","introduced":"0"}],"component":"alt-design/alt-redirect","cve_ids":["CVE-2025-60868"],"ecosystem":"Packagist","epss":0.00229,"exploited":false,"fixed_versions":["1.6.4"],"ghsa_id":"GHSA-rpjr-pcmr-9ppw","id":"tcs_01M5KF8EQM84R50XRQDHNCETYH","modified_at":"2025-10-15T23:54:37.040819Z","published_at":"2025-10-10T15:31:28Z","references":["https://osv.dev/vulnerability/GHSA-rpjr-pcmr-9ppw","https://nvd.nist.gov/vuln/detail/CVE-2025-60868","https://github.com/alt-design/Alt-Redirect-Addon/commit/5dc6753c7151ac994c63e18914998991b1f65cbd","https://gist.github.com/kasiasok/870933de18d1400fa8be88e1bcadec6c","https://github.com/alt-design/Alt-Redirect-Addon","https://github.com/alt-design/Alt-Redirect-Addon/releases/tag/v1.6.4","https://statamic.com/addons/alt-design/alt-redirects/release-notes"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-rpjr-pcmr-9ppw","url":"https://osv.dev/vulnerability/GHSA-rpjr-pcmr-9ppw"}],"summary":"Alt Redirect: Potential Authentication Bypass by Spoofing through query-string stripping logic flaw"}