{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"org.wso2.carbon.mediation:org.wso2.carbon.localentry","cve_ids":["CVE-2025-10713"],"ecosystem":"Maven","epss":0.00455,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fvfq-q238-j7j3","id":"tcs_01M5N8WRKRSKKW02Q8H31GYEHC","modified_at":"2026-09-10T03:50:30.978709545Z","published_at":"2025-11-05T18:31:31Z","references":["https://osv.dev/vulnerability/GHSA-fvfq-q238-j7j3","https://nvd.nist.gov/vuln/detail/CVE-2025-10713","https://github.com/wso2/carbon-mediation/pull/1784","https://github.com/wso2/carbon-mediation/commit/b995b2f1db96a4697791f0202cc8713f15640fd5","https://github.com/wso2/carbon-mediation","https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4505"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-fvfq-q238-j7j3","url":"https://osv.dev/vulnerability/GHSA-fvfq-q238-j7j3"}],"summary":"WSO2 Carbon Mediation vulnerable to XML External Entity (XXE) attacks"}