{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.6.0-SNAPSHOT"}],"component":"org.nutz:nutzboot-parent","cve_ids":["CVE-2025-13804"],"ecosystem":"Maven","epss":0.00265,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-qp56-qj59-hjf8","id":"tcs_01M5N99WHRSQ5HRTBQCSJ9A829","modified_at":"2025-12-02T01:32:22.555954Z","published_at":"2025-12-01T06:30:25Z","references":["https://osv.dev/vulnerability/GHSA-qp56-qj59-hjf8","https://nvd.nist.gov/vuln/detail/CVE-2025-13804","https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-InfoLeak-1/report.md","https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-InfoLeak-1/report.md#vulnerability-details-and-poc","https://github.com/nutzam/nutzboot","https://vuldb.com/?ctiid.333814","https://vuldb.com/?id.333814","https://vuldb.com/?submit.692050"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-qp56-qj59-hjf8","url":"https://osv.dev/vulnerability/GHSA-qp56-qj59-hjf8"}],"summary":"NutzBoot vulnerable to information disclosure"}