{"action":"Upgrade @finos/git-proxy to 1.19.2 or later.","affected":[{"fixed":"1.19.2","introduced":"0"}],"component":"@finos/git-proxy","cve_ids":["CVE-2025-54584"],"ecosystem":"npm","epss":0.00571,"exploited":false,"fixed_versions":["1.19.2"],"ghsa_id":"GHSA-xxmh-rf63-qwjv","id":"tcs_01M5KGK8E4FBFTA3AC1KWXZHDZ","modified_at":"2025-07-31T11:18:40Z","published_at":"2025-07-30T16:40:07Z","references":["https://osv.dev/vulnerability/GHSA-xxmh-rf63-qwjv","https://github.com/finos/git-proxy/security/advisories/GHSA-xxmh-rf63-qwjv","https://nvd.nist.gov/vuln/detail/CVE-2025-54584","https://github.com/finos/git-proxy/commit/333c98a165a5a1ec88414db3d4a2c6f81e083e0f","https://github.com/finos/git-proxy/commit/a620a2f33c39c78e01783a274580bf822af3cc3a","https://github.com/finos/git-proxy","https://github.com/finos/git-proxy/releases/tag/v1.19.2"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GHSA-xxmh-rf63-qwjv","url":"https://osv.dev/vulnerability/GHSA-xxmh-rf63-qwjv"},{"source":"nvd","source_id":"CVE-2025-54584","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54584"}],"summary":"GitProxy Backfile Parsing Exploit"}