{"action":"Upgrade froxlor/froxlor to 2.3.5 or later.","affected":[{"fixed":"2.3.5","introduced":"0"}],"component":"froxlor/froxlor","cve_ids":["CVE-2026-30932"],"ecosystem":"Packagist","epss":0.00705,"exploited":false,"fixed_versions":["2.3.5"],"ghsa_id":"GHSA-x6w6-2xwp-3jh6","id":"tcs_01M5KFAS1564HE2RWHZCJPCCEF","modified_at":"2026-07-08T08:29:23.876144376Z","published_at":"2026-03-24T16:49:21Z","references":["https://osv.dev/vulnerability/GHSA-x6w6-2xwp-3jh6","https://github.com/froxlor/froxlor/security/advisories/GHSA-x6w6-2xwp-3jh6","https://nvd.nist.gov/vuln/detail/CVE-2026-30932","https://github.com/froxlor/froxlor/commit/b34829262dc32818b37f6a1eabb426d0b277a86b","https://github.com/froxlor/froxlor","https://github.com/froxlor/froxlor/releases/tag/2.3.5"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-x6w6-2xwp-3jh6","url":"https://osv.dev/vulnerability/GHSA-x6w6-2xwp-3jh6"}],"summary":"Froxlor is vulnerable to BIND zone file injection via unsanitized DNS record content in DomainZones API"}