{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"drupal/ueditor","cve_ids":["CVE-2025-3903"],"ecosystem":"Packagist","ecosystem_qualifier":"Packagist:https://packages.drupal.org/8","epss":0.00396,"exploited":false,"fixed_versions":[],"id":"tcs_01M5MF7SBCEXT5N0D1Y9BETWK5","modified_at":"2026-09-10T03:46:14.913275744Z","published_at":"2025-04-23T16:59:11Z","references":["https://osv.dev/vulnerability/DRUPAL-CONTRIB-2025-044","https://www.drupal.org/sa-contrib-2025-044"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"DRUPAL-CONTRIB-2025-044","url":"https://osv.dev/vulnerability/DRUPAL-CONTRIB-2025-044"},{"source":"nvd","source_id":"CVE-2025-3903","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3903"}],"summary":"The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please re"}