{"action":"Upgrade octoprint to 1.11.0 or later.","affected":[{"fixed":"1.11.0","introduced":"0"}],"component":"octoprint","cve_ids":["CVE-2025-32788"],"ecosystem":"PyPI","epss":0.00246,"exploited":false,"fixed_versions":["1.11.0"],"ghsa_id":"GHSA-qw93-h6pf-226x","id":"tcs_01M5KGPRF79V45STG1TRFS31NP","modified_at":"2025-06-27T18:14:53.754456Z","published_at":"2025-04-22T18:15:59Z","references":["https://osv.dev/vulnerability/PYSEC-2025-56","https://github.com/OctoPrint/OctoPrint/security/advisories/GHSA-qw93-h6pf-226x","https://github.com/OctoPrint/OctoPrint/commit/41ff431014edfa18ca1a01897b10463934dc7fc2"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"PYSEC-2025-56","url":"https://osv.dev/vulnerability/PYSEC-2025-56"}],"summary":"OctoPrint provides a web interface for controlling consumer 3D printers. In versions up to and including 1.10.3, OctoPrint has a vulnerability that allows an attacker to bypass the login redirect and"}