{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.5.4","last_affected":"0.8.14"}],"component":"reflex","cve_ids":["CVE-2025-62379"],"ecosystem":"PyPI","epss":0.00253,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rfh5-c9h5-q8jm","id":"tcs_01M5KGW5CYYSTRHGMEYCEBJQZT","modified_at":"2026-07-07T17:47:00.306257423Z","published_at":"2026-07-07T16:03:07.777195Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1868","https://github.com/reflex-dev/reflex/security/advisories/GHSA-rfh5-c9h5-q8jm","https://nvd.nist.gov/vuln/detail/CVE-2025-62379","https://github.com/reflex-dev/reflex/commit/ade12549f3c0ddab3d7382c581bc04a3c1f989ec","https://file.notion.so/f/f/d105d145-04bc-45c5-b46c-ed880895e9de/a86c3e3b-f67f-45d1-8fa2-4aa0ba7d0068/poc.mp4?table=block&id=26955717-5d2e-805a-b53c-e25ee03f1d4b&spaceId=d105d145-04bc-45c5-b46c-ed880895e9de&expirationTimestamp=1760508000000&signature=ZPp8PVldfGOh0gB5tVElRV6GN789R-EG0oxZgkFjjLU&downloadName=poc.mp4","https://github.com/reflex-dev/reflex","https://github.com/reflex-dev/reflex/blob/51f9f2c2f52cac4d66c07683a12bc0237311b6be/reflex/utils/codespaces.py#L18-L46","https://pypi.org/project/reflex","https://github.com/advisories/GHSA-rfh5-c9h5-q8jm"],"severity":{"label":"low","score":3.1},"sources":[{"source":"osv","source_id":"PYSEC-2026-1868","url":"https://osv.dev/vulnerability/PYSEC-2026-1868"}],"summary":"reflex-dev/reflex has an Open Redirect vulnerability"}