{"action":"Upgrade mobsf to 4.3.2 or later.","affected":[{"fixed":"4.3.2","introduced":"0"}],"component":"mobsf","cve_ids":["CVE-2025-31116"],"ecosystem":"PyPI","epss":0.00474,"exploited":false,"fixed_versions":["4.3.2"],"ghsa_id":"GHSA-fcfq-m8p6-gw56","id":"tcs_01M5KFF1HP04EX0VT9R8Z08REN","modified_at":"2026-06-10T17:14:17.878593075Z","published_at":"2025-03-31T17:23:21Z","references":["https://osv.dev/vulnerability/GHSA-fcfq-m8p6-gw56","https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-fcfq-m8p6-gw56","https://nvd.nist.gov/vuln/detail/CVE-2025-31116","https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/4b8bab5a9858c69fe13be4631b82d82186e0d3bd","https://github.com/MobSF/Mobile-Security-Framework-MobSF","https://github.com/pypa/advisory-database/tree/main/vulns/mobsf/PYSEC-2025-48.yaml"],"severity":{"label":"medium","score":4.4},"sources":[{"source":"osv","source_id":"GHSA-fcfq-m8p6-gw56","url":"https://osv.dev/vulnerability/GHSA-fcfq-m8p6-gw56"}],"summary":"Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding"}