{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.6.0-SNAPSHOT"}],"component":"org.nutz:nutzboot-parent","cve_ids":["CVE-2025-13805"],"ecosystem":"Maven","epss":0.00375,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fgmj-6h3v-4q56","id":"tcs_01M5N8VZR24WGNWARPXCBF6TDA","modified_at":"2025-12-02T01:30:38.076886Z","published_at":"2025-12-01T06:30:25Z","references":["https://osv.dev/vulnerability/GHSA-fgmj-6h3v-4q56","https://nvd.nist.gov/vuln/detail/CVE-2025-13805","https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-RCE-1/report.md","https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-RCE-1/report.md#vulnerability-details-and-poc","https://github.com/nutzam/nutzboot","https://vuldb.com/?ctiid.333815","https://vuldb.com/?id.333815","https://vuldb.com/?submit.692053"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-fgmj-6h3v-4q56","url":"https://osv.dev/vulnerability/GHSA-fgmj-6h3v-4q56"}],"summary":"NutzBoot vulnerable to deserialization"}