{"action":"Upgrade Csla to 6.0.0 or later.","affected":[{"fixed":"6.0.0","introduced":"0"}],"component":"Csla","cve_ids":["CVE-2025-66631"],"ecosystem":"NuGet","epss":0.00674,"exploited":false,"fixed_versions":["6.0.0"],"ghsa_id":"GHSA-wq34-7f4g-953v","id":"tcs_01M5N948RZW6SCQ75N1C32NFCV","modified_at":"2025-12-09T19:52:27.238034Z","published_at":"2025-12-08T22:15:56Z","references":["https://osv.dev/vulnerability/GHSA-wq34-7f4g-953v","https://github.com/MarimerLLC/csla/security/advisories/GHSA-wq34-7f4g-953v","https://nvd.nist.gov/vuln/detail/CVE-2025-66631","https://github.com/MarimerLLC/csla/issues/4001","https://github.com/MarimerLLC/csla/pull/4018","https://github.com/MarimerLLC/csla","https://learn.microsoft.com/en-us/dotnet/fundamentals/code-analysis/quality-rules/ca2310"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-wq34-7f4g-953v","url":"https://osv.dev/vulnerability/GHSA-wq34-7f4g-953v"},{"source":"nvd","source_id":"CVE-2025-66631","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66631"}],"summary":"Csla affected by Remote Code Execution via WcfProxy (NetDataContractSerializer)"}