{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.2.12"}],"component":"novosga/novosga","cve_ids":["CVE-2025-11322"],"ecosystem":"Packagist","epss":0.00359,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xgr2-5837-hf48","id":"tcs_01M5KFB1MXFFWJ08Y5TG5XMB73","modified_at":"2025-10-07T13:57:23.831534Z","published_at":"2025-10-06T06:32:58Z","references":["https://osv.dev/vulnerability/GHSA-xgr2-5837-hf48","https://nvd.nist.gov/vuln/detail/CVE-2025-11322","https://github.com/marcelomulder/CVE/blob/main/NovoSga/CVE-2025-11322.md","https://github.com/marcelomulder/CVE/blob/main/NovoSga/Weak%20Password%20Policy%20in%20Novosga.md","https://github.com/novosga/novosga","https://vuldb.com/?ctiid.327203","https://vuldb.com/?id.327203","https://vuldb.com/?submit.664517"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-xgr2-5837-hf48","url":"https://osv.dev/vulnerability/GHSA-xgr2-5837-hf48"}],"summary":"NovoSGA: Manipulation of User Creation Page can lead to weak password requirements"}