{"action":"Upgrade request-filtering-agent to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"request-filtering-agent","cve_ids":["CVE-2025-57814"],"ecosystem":"npm","epss":0.00458,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-pw25-c82r-75mm","id":"tcs_01M5KG4JA3A609PG91ZNVXYD9B","modified_at":"2025-08-26T17:12:50Z","published_at":"2025-08-25T21:48:01Z","references":["https://osv.dev/vulnerability/GHSA-pw25-c82r-75mm","https://github.com/azu/request-filtering-agent/security/advisories/GHSA-pw25-c82r-75mm","https://nvd.nist.gov/vuln/detail/CVE-2025-57814","https://github.com/azu/request-filtering-agent","https://github.com/azu/request-filtering-agent-https127-test"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-pw25-c82r-75mm","url":"https://osv.dev/vulnerability/GHSA-pw25-c82r-75mm"},{"source":"nvd","source_id":"CVE-2025-57814","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-57814"}],"summary":"request-filtering-agent SSRF Bypass via HTTPS Requests to 127.0.0.1"}