{"action":"Upgrade github.com/Anipaleja/nginx-defender to 1.5.0 or later.","affected":[{"fixed":"1.5.0","introduced":"0"}],"component":"github.com/Anipaleja/nginx-defender","cve_ids":["CVE-2025-55740"],"ecosystem":"Go","epss":0.0024,"exploited":false,"fixed_versions":["1.5.0"],"ghsa_id":"GHSA-pr72-8fxw-xx22","id":"tcs_01M5KFHSMRRCRZ31731QQF063B","modified_at":"2025-08-29T20:37:35Z","published_at":"2025-08-19T22:24:40Z","references":["https://osv.dev/vulnerability/GHSA-pr72-8fxw-xx22","https://github.com/Anipaleja/nginx-defender/security/advisories/GHSA-pr72-8fxw-xx22","https://nvd.nist.gov/vuln/detail/CVE-2025-55740","https://github.com/Anipaleja/nginx-defender","https://pkg.go.dev/vuln/GO-2025-3896"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-pr72-8fxw-xx22","url":"https://osv.dev/vulnerability/GHSA-pr72-8fxw-xx22"}],"summary":"Default Credentials in nginx-defender Configuration Files"}