{"action":"Upgrade github.com/bpg/terraform-provider-proxmox to 0.93.1 or later.","affected":[{"fixed":"0.93.1","introduced":"0"}],"component":"github.com/bpg/terraform-provider-proxmox","cve_ids":["CVE-2026-25499"],"ecosystem":"Go","epss":0.00483,"exploited":false,"fixed_versions":["0.93.1"],"ghsa_id":"GHSA-gwch-7m8v-7544","id":"tcs_01M5KGDH72FGW07PGJ6FR7STNS","modified_at":"2026-02-05T06:56:04.104744Z","published_at":"2026-02-05T03:20:45Z","references":["https://osv.dev/vulnerability/GO-2026-4395","https://github.com/bpg/terraform-provider-proxmox/security/advisories/GHSA-gwch-7m8v-7544","https://nvd.nist.gov/vuln/detail/CVE-2026-25499","https://github.com/bpg/terraform-provider-proxmox/commit/bd604c41a31e2a55dd6acc01b0608be3ea49c023"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GO-2026-4395","url":"https://osv.dev/vulnerability/GO-2026-4395"},{"source":"nvd","source_id":"CVE-2026-25499","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25499"}],"summary":"terraform-provider-proxmox has insecure sudo recommendation in the documentation in github.com/bpg/terraform-provider-proxmox"}