{"action":"Upgrade livewire/volt to 1.7.0 or later.","affected":[{"fixed":"1.7.0","introduced":"0"}],"component":"livewire/volt","cve_ids":["CVE-2025-27517"],"ecosystem":"Packagist","epss":0.00619,"exploited":false,"fixed_versions":["1.7.0"],"ghsa_id":"GHSA-v69f-5jxm-hwvv","id":"tcs_01M5KF8W435PRQBYES5KZZ9EEE","modified_at":"2025-03-05T22:09:53.229014Z","published_at":"2025-03-05T19:47:01Z","references":["https://osv.dev/vulnerability/GHSA-v69f-5jxm-hwvv","https://github.com/livewire/volt/security/advisories/GHSA-v69f-5jxm-hwvv","https://nvd.nist.gov/vuln/detail/CVE-2025-27517","https://github.com/livewire/volt"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-v69f-5jxm-hwvv","url":"https://osv.dev/vulnerability/GHSA-v69f-5jxm-hwvv"},{"source":"nvd","source_id":"CVE-2025-27517","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27517"}],"summary":"Volt Allows RCE Via User-Crafted Requests"}