{"action":"Upgrade io.minio:minio to 8.6.0 or later.","affected":[{"fixed":"8.6.0","introduced":"0"}],"component":"io.minio:minio","cve_ids":["CVE-2025-59952"],"ecosystem":"Maven","epss":0.00491,"exploited":false,"fixed_versions":["8.6.0"],"ghsa_id":"GHSA-h7rh-xfpj-hpcm","id":"tcs_01M5N900WFMN1EF80PR5JJYT50","modified_at":"2025-09-30T15:43:37.332772Z","published_at":"2025-09-29T17:53:31Z","references":["https://osv.dev/vulnerability/GHSA-h7rh-xfpj-hpcm","https://github.com/minio/minio-java/security/advisories/GHSA-h7rh-xfpj-hpcm","https://nvd.nist.gov/vuln/detail/CVE-2025-59952","https://github.com/minio/minio-java/commit/f7a98d06b25e5464bdd4811b044e25ff9101d37f","https://github.com/minio/minio-java","https://github.com/minio/minio-java/releases/tag/8.6.0"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-h7rh-xfpj-hpcm","url":"https://osv.dev/vulnerability/GHSA-h7rh-xfpj-hpcm"},{"source":"nvd","source_id":"CVE-2025-59952","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59952"}],"summary":"MinIO Java Client XML Tag Value Substitution Vulnerability"}