{"action":"Upgrade @kottster/server to 3.3.2 or later.","affected":[{"fixed":"3.3.2","introduced":"3.2.0"}],"component":"@kottster/server","cve_ids":["CVE-2025-62713"],"ecosystem":"npm","epss":0.00609,"exploited":false,"fixed_versions":["3.3.2"],"ghsa_id":"GHSA-j3w7-9qc3-g96p","id":"tcs_01M5KFWSDAMSMN71W4R6QVWVJC","modified_at":"2025-10-23T20:37:07Z","published_at":"2025-10-23T16:01:35Z","references":["https://osv.dev/vulnerability/GHSA-j3w7-9qc3-g96p","https://github.com/kottster/kottster/security/advisories/GHSA-j3w7-9qc3-g96p","https://nvd.nist.gov/vuln/detail/CVE-2025-62713","https://github.com/kottster/kottster/commit/0a7d24922a23aac98372155348787670937eef89","https://github.com/kottster/kottster"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-j3w7-9qc3-g96p","url":"https://osv.dev/vulnerability/GHSA-j3w7-9qc3-g96p"},{"source":"nvd","source_id":"CVE-2025-62713","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62713"}],"summary":"Kottster app reinitialization can be re-triggered allowing command injection in development mode"}