{"action":"Upgrade bugsink to 1.4.3 or later.","affected":[{"fixed":"1.7.4","introduced":"1.7.0"},{"fixed":"1.6.4","introduced":"1.6.0"},{"fixed":"1.5.5","introduced":"1.5.0"},{"fixed":"1.4.3","introduced":"0"}],"component":"bugsink","cve_ids":["CVE-2025-54433"],"ecosystem":"PyPI","epss":0.00658,"exploited":false,"fixed_versions":["1.7.4","1.6.4","1.5.5","1.4.3"],"ghsa_id":"GHSA-q78p-g86f-jg6q","id":"tcs_01M5KFVHQQX7W0XRDBQDP2NX4Q","modified_at":"2026-07-07T17:56:59.810559523Z","published_at":"2025-07-29T20:13:51Z","references":["https://osv.dev/vulnerability/GHSA-q78p-g86f-jg6q","https://github.com/bugsink/bugsink/security/advisories/GHSA-q78p-g86f-jg6q","https://nvd.nist.gov/vuln/detail/CVE-2025-54433","https://github.com/bugsink/bugsink/commit/1001726f4389e982c486cdd5fa81941cb46cfc33","https://github.com/bugsink/bugsink/commit/211ddf76758c808c095b5f836c363f148d934d21","https://github.com/bugsink/bugsink/commit/2c41fbe3881bdea83399a7f9fdc8cff198ae089f","https://github.com/bugsink/bugsink/commit/53cf1a17a3e96f7c83c7451fd56f980a09d0c9b0","https://github.com/bugsink/bugsink/commit/55a155003d0b416ea008c5e7dcde85130ad21d9b","https://github.com/bugsink/bugsink/commit/b94aa8a5c96ce8cdd9711b6beb4e518264993ac2","https://github.com/bugsink/bugsink/commit/c341687bd655543730c812db35c29199f788be6b","https://github.com/bugsink/bugsink/commit/c87217bd565122ba70af90436e3ab2cd9bee658f","https://github.com/bugsink/bugsink"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-q78p-g86f-jg6q","url":"https://osv.dev/vulnerability/GHSA-q78p-g86f-jg6q"},{"source":"nvd","source_id":"CVE-2025-54433","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54433"}],"summary":"Bugsink path traversal via event_id in ingestion"}