{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.5.1"}],"component":"com.vip.saturn:saturn-console","cve_ids":["CVE-2025-29085"],"ecosystem":"Maven","epss":0.3121,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-49v8-p6mm-3pfj","id":"tcs_01M5N8AR9P7J1W6RJENNNFKYWK","modified_at":"2025-04-13T05:42:09.297383Z","published_at":"2025-04-02T21:30:51Z","references":["https://osv.dev/vulnerability/GHSA-49v8-p6mm-3pfj","https://nvd.nist.gov/vuln/detail/CVE-2025-29085","https://gist.github.com/Cafe-Tea/bcef0d7a2bdb5ec8e0d69de852fdc900","https://github.com/vipshop/Saturn"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-49v8-p6mm-3pfj","url":"https://osv.dev/vulnerability/GHSA-49v8-p6mm-3pfj"},{"source":"nvd","source_id":"CVE-2025-29085","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-29085"}],"summary":"Vipshop Saturn Console Vulnerable to SQL Injection via ClusterKey Component"}