{"action":"Upgrade @dirac-grid/diracx-web-components to 0.1.0-a8 or later.","affected":[{"fixed":"0.1.0-a8","introduced":"0"}],"component":"@dirac-grid/diracx-web-components","cve_ids":["CVE-2025-54066"],"ecosystem":"npm","epss":0.00413,"exploited":false,"fixed_versions":["0.1.0-a8"],"ghsa_id":"GHSA-hfj7-542q-8fvv","id":"tcs_01M5KFTXRS21ARZC8MJ65S73N5","modified_at":"2025-07-17T20:12:19.449066Z","published_at":"2025-07-17T19:40:59Z","references":["https://osv.dev/vulnerability/GHSA-hfj7-542q-8fvv","https://github.com/DIRACGrid/diracx-web/security/advisories/GHSA-hfj7-542q-8fvv","https://nvd.nist.gov/vuln/detail/CVE-2025-54066","https://github.com/DIRACGrid/diracx-web/commit/eba3b7bc4f9d394074215986e6d3c15b546b25d5","https://github.com/DIRACGrid/diracx-web"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"GHSA-hfj7-542q-8fvv","url":"https://osv.dev/vulnerability/GHSA-hfj7-542q-8fvv"}],"summary":"DiracX-Web is vulnerable to attack through an Open Redirect on its login page"}