{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.8.1","last_affected":"0.12.0"}],"component":"docsgpt","cve_ids":["CVE-2025-0868"],"ecosystem":"npm","epss":0.17087,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-9gff-5v8w-x922","id":"tcs_01M5KFFTKKJHG35SC1XHGGXAG0","modified_at":"2025-02-20T20:28:57.412245Z","published_at":"2025-02-20T12:31:15Z","references":["https://osv.dev/vulnerability/GHSA-9gff-5v8w-x922","https://nvd.nist.gov/vuln/detail/CVE-2025-0868","https://cert.pl/en/posts/2025/02/CVE-2025-0868","https://cert.pl/posts/2025/02/CVE-2025-0868","https://github.com/arc53/DocsGPT","https://github.com/arc53/docsgpt"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-9gff-5v8w-x922","url":"https://osv.dev/vulnerability/GHSA-9gff-5v8w-x922"},{"source":"nvd","source_id":"CVE-2025-0868","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0868"}],"summary":"DocsGPT Allows Remote Code Execution"}