{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"12.0.0"}],"component":"Piranha","cve_ids":["CVE-2025-67290"],"ecosystem":"NuGet","epss":0.00213,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fw48-7qf9-455m","id":"tcs_01M5N8N3RPTKCA0YE0AX59Y8Q7","modified_at":"2025-12-22T23:26:16.474419Z","published_at":"2025-12-22T21:30:33Z","references":["https://osv.dev/vulnerability/GHSA-fw48-7qf9-455m","https://nvd.nist.gov/vuln/detail/CVE-2025-67290","https://github.com/PiranhaCMS/piranha.core","https://github.com/vuquyen03/CVE/tree/main/CVE-2025-67290","http://piranha.com"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-fw48-7qf9-455m","url":"https://osv.dev/vulnerability/GHSA-fw48-7qf9-455m"},{"source":"nvd","source_id":"CVE-2025-67290","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-67290"}],"summary":"Piranha has stored cross-site scripting (XSS) vulnerability"}