{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.1.2"}],"component":"tech.powerjob:powerjob-common","cve_ids":["CVE-2025-14518"],"ecosystem":"Maven","epss":0.00348,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-8xqm-6fj2-hfgf","id":"tcs_01M5N8NQN5EFCRNNEA5MYYRHKW","modified_at":"2025-12-11T17:41:15.544912Z","published_at":"2025-12-11T15:30:32Z","references":["https://osv.dev/vulnerability/GHSA-8xqm-6fj2-hfgf","https://nvd.nist.gov/vuln/detail/CVE-2025-14518","https://github.com/PowerJob/PowerJob/issues/1144","https://github.com/PowerJob/PowerJob/issues/1144#issue-3673393002","https://github.com/PowerJob/PowerJob","https://vuldb.com/?ctiid.335856","https://vuldb.com/?id.335856","https://vuldb.com/?submit.702896"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-8xqm-6fj2-hfgf","url":"https://osv.dev/vulnerability/GHSA-8xqm-6fj2-hfgf"}],"summary":"PowerJob has a server-side request forgery vulnerability in PingPongUtils.java"}