{"action":"Upgrade org.apache.kylin:kylin to 5.0.3 or later.","affected":[{"fixed":"5.0.3","introduced":"4.0.0"}],"component":"org.apache.kylin:kylin","cve_ids":["CVE-2025-61735"],"ecosystem":"Maven","epss":0.01042,"exploited":false,"fixed_versions":["5.0.3"],"ghsa_id":"GHSA-f6m8-qm7j-fh65","id":"tcs_01M5N8V87Z9CSJ9YNBVF1PJN5F","modified_at":"2025-11-05T20:53:38.360735Z","published_at":"2025-10-02T12:31:06Z","references":["https://osv.dev/vulnerability/GHSA-f6m8-qm7j-fh65","https://nvd.nist.gov/vuln/detail/CVE-2025-61735","https://github.com/apache/kylin/pull/2332","https://github.com/apache/kylin/commit/22eb8fd5dfdeffa3fc57bae6d5c82a019eece662","https://github.com/apache/kylin","https://issues.apache.org/jira/browse/KYLIN-6082","https://lists.apache.org/thread/yscobmx869zvprsykb94r24jtmb58ckh","http://www.openwall.com/lists/oss-security/2025/09/30/9"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-f6m8-qm7j-fh65","url":"https://osv.dev/vulnerability/GHSA-f6m8-qm7j-fh65"}],"summary":"Apache Kylin Server-Side Request Forgery (SSRF) Vulnerability"}