{"action":"Upgrade @sap/approuter to 16.7.2 or later.","affected":[{"fixed":"16.7.2","introduced":"2.6.1"}],"component":"@sap/approuter","cve_ids":["CVE-2025-24876"],"ecosystem":"npm","epss":0.00495,"exploited":false,"fixed_versions":["16.7.2"],"ghsa_id":"GHSA-cpfx-964w-4jvp","id":"tcs_01M5KFK6VDQK77F45QX2B0P1ES","modified_at":"2025-02-11T16:56:59.985625Z","published_at":"2025-02-11T03:30:56Z","references":["https://osv.dev/vulnerability/GHSA-cpfx-964w-4jvp","https://nvd.nist.gov/vuln/detail/CVE-2025-24876","https://me.sap.com/notes/3567974","https://support.sap.com/en/my-support/knowledge-base/security-notes-news/february-2025.html","https://www.npmjs.com/package/@sap/approuter?activeTab=versions"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-cpfx-964w-4jvp","url":"https://osv.dev/vulnerability/GHSA-cpfx-964w-4jvp"}],"summary":"Authentication bypass in @sap/approuter"}