{"action":"Upgrade motioneye to 0.43.1b4 or later.","affected":[{"fixed":"0.43.1b4","introduced":"0.43.1b1"}],"component":"motioneye","cve_ids":["CVE-2025-47782"],"ecosystem":"PyPI","epss":0.00508,"exploited":false,"fixed_versions":["0.43.1b4"],"ghsa_id":"GHSA-g5mq-prx7-c588","id":"tcs_01M5KGPMF1W3MA9ESA6D3K8G56","modified_at":"2025-05-14T17:57:10.936625Z","published_at":"2025-05-14T16:15:29Z","references":["https://osv.dev/vulnerability/PYSEC-2025-39","https://github.com/motioneye-project/motioneye/security/advisories/GHSA-g5mq-prx7-c588","https://github.com/motioneye-project/motioneye/issues/3142","https://github.com/motioneye-project/motioneye/pull/3143"],"severity":{"label":"high","score":8.9},"sources":[{"source":"osv","source_id":"PYSEC-2025-39","url":"https://osv.dev/vulnerability/PYSEC-2025-39"},{"source":"nvd","source_id":"CVE-2025-47782","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47782"}],"summary":"motionEye is an online interface for the software motion, a video surveillance program with motion detection. In versions 0.43.1b1 through 0.43.1b3, using a constructed (camera) device path with the `"}