{"action":"Upgrade z-push/z-push-dev to 2.7.6 or later.","affected":[{"fixed":"2.7.6","introduced":"0"}],"component":"z-push/z-push-dev","cve_ids":["CVE-2025-8264"],"ecosystem":"Packagist","epss":0.00432,"exploited":false,"fixed_versions":["2.7.6"],"ghsa_id":"GHSA-w832-w3p8-cw29","id":"tcs_01M5KF9WTBY6E2FF0PNPW2E3G5","modified_at":"2025-07-29T20:57:16.664119Z","published_at":"2025-07-29T06:30:21Z","references":["https://osv.dev/vulnerability/GHSA-w832-w3p8-cw29","https://nvd.nist.gov/vuln/detail/CVE-2025-8264","https://github.com/Z-Hub/Z-Push/pull/161","https://github.com/Z-Hub/Z-Push/pull/161/commits/f981d515a35ac4c303959af21dce880a5db02786","https://github.com/Z-Hub/Z-Push/commit/deb044a40e97dab1814da9aa8330c0a590957fc5","https://github.com/Z-Hub/Z-Push","https://github.com/Z-Hub/Z-Push/blob/af25a2169a50d6e05a5916d1e8b2b6cd17011c98/src/backend/imap/user_identity.php%23L211C9-L214C25","https://security.snyk.io/vuln/SNYK-PHP-ZPUSHZPUSHDEV-10908180","https://xbow.com/blog/xbow-zpush-sqli"],"severity":{"label":"critical","score":9},"sources":[{"source":"osv","source_id":"GHSA-w832-w3p8-cw29","url":"https://osv.dev/vulnerability/GHSA-w832-w3p8-cw29"}],"summary":"z-push/z-push-dev SQL Injection Vulnerability"}