{"action":"Upgrade pyrofork to 2.3.69 or later.","affected":[{"fixed":"2.3.69","introduced":"0"}],"component":"pyrofork","cve_ids":["CVE-2025-67720"],"ecosystem":"PyPI","epss":0.00318,"exploited":false,"fixed_versions":["2.3.69"],"ghsa_id":"GHSA-6h2f-wjhf-4wjx","id":"tcs_01M5KGW0JE83X2F7Z0G1WBBS4Q","modified_at":"2026-07-07T17:47:50.506190015Z","published_at":"2026-07-07T16:03:12.755614Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1841","https://github.com/Mayuri-Chan/pyrofork/security/advisories/GHSA-6h2f-wjhf-4wjx","https://nvd.nist.gov/vuln/detail/CVE-2025-67720","https://github.com/Mayuri-Chan/pyrofork/commit/2f2d515575cc9c360bd74340a61a1d2b1e1f1f95","https://github.com/Mayuri-Chan/pyrofork","https://pypi.org/project/pyrofork","https://github.com/advisories/GHSA-6h2f-wjhf-4wjx"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-1841","url":"https://osv.dev/vulnerability/PYSEC-2026-1841"}],"summary":"Pyrofork has a Path Traversal in download_media Method"}