{"action":"Upgrade @finos/git-proxy to 1.19.2 or later.","affected":[{"fixed":"1.19.2","introduced":"0"}],"component":"@finos/git-proxy","cve_ids":["CVE-2025-54583"],"ecosystem":"npm","epss":0.00529,"exploited":false,"fixed_versions":["1.19.2"],"ghsa_id":"GHSA-qr93-8wwf-22g4","id":"tcs_01M5KG70JXG090M0SQ64V00J63","modified_at":"2025-07-31T11:18:36Z","published_at":"2025-07-30T16:34:50Z","references":["https://osv.dev/vulnerability/GHSA-qr93-8wwf-22g4","https://github.com/finos/git-proxy/security/advisories/GHSA-qr93-8wwf-22g4","https://nvd.nist.gov/vuln/detail/CVE-2025-54583","https://github.com/finos/git-proxy/commit/a620a2f33c39c78e01783a274580bf822af3cc3a","https://github.com/finos/git-proxy/commit/bd2ecb2099cba21bca3941ee4d655d2eb887b3a9","https://github.com/finos/git-proxy","https://github.com/finos/git-proxy/releases/tag/v1.19.2"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-qr93-8wwf-22g4","url":"https://osv.dev/vulnerability/GHSA-qr93-8wwf-22g4"},{"source":"nvd","source_id":"CVE-2025-54583","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54583"}],"summary":"GitProxy Approval Bypass When Pushing Multiple Branches"}