{"action":"Upgrade @farmfe/core to 1.7.6 or later.","affected":[{"fixed":"1.7.6","introduced":"0"}],"component":"@farmfe/core","cve_ids":["CVE-2025-56647"],"ecosystem":"npm","epss":0.00219,"exploited":false,"fixed_versions":["1.7.6"],"ghsa_id":"GHSA-p773-8mf4-rjm5","id":"tcs_01M5KG2W6KQ1FX2REB72PXHSAS","modified_at":"2026-02-12T22:26:23.936915Z","published_at":"2026-02-12T18:30:23Z","references":["https://osv.dev/vulnerability/GHSA-p773-8mf4-rjm5","https://nvd.nist.gov/vuln/detail/CVE-2025-56647","https://github.com/farm-fe/farm/issues/2168","https://github.com/farm-fe/farm/commit/83342ef06e0aea37270950fd8c930422c4df0679","https://gist.github.com/R4356th/d4372c6f83275d583c180c0e7d7332af","https://github.com/farm-fe/farm"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-p773-8mf4-rjm5","url":"https://osv.dev/vulnerability/GHSA-p773-8mf4-rjm5"}],"summary":"@farmfe/core is Missing Origin Validation in WebSocket"}