{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"16.10"}],"component":"org.opencastproject:opencast-common","cve_ids":["CVE-2025-61788"],"ecosystem":"Maven","epss":0.00212,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-m2vg-rmq6-p62r","id":"tcs_01M5N943HVB5RZR4X1X7GD12EN","modified_at":"2025-10-13T15:58:00.897489Z","published_at":"2025-10-08T20:33:31Z","references":["https://osv.dev/vulnerability/GHSA-m2vg-rmq6-p62r","https://github.com/opencast/opencast/security/advisories/GHSA-m2vg-rmq6-p62r","https://nvd.nist.gov/vuln/detail/CVE-2025-61788","https://github.com/opencast/opencast/commit/2809520fa88d108d8104c760f00c10bad42c14f9","https://github.com/opencast/opencast"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-m2vg-rmq6-p62r","url":"https://osv.dev/vulnerability/GHSA-m2vg-rmq6-p62r"}],"summary":"Opencast's Paella Player 7 is vulnerable to Cross-Site Scripting"}