{"action":"Upgrade com.erudika:para-server to 1.50.8 or later.","affected":[{"fixed":"1.50.8","introduced":"0"}],"component":"com.erudika:para-server","cve_ids":["CVE-2025-49009"],"ecosystem":"Maven","epss":0.00166,"exploited":false,"fixed_versions":["1.50.8"],"ghsa_id":"GHSA-qx7g-fx8q-545g","id":"tcs_01M5N9AFKSDWWN39NMRMY6Z2D0","modified_at":"2026-09-10T03:50:25.383357495Z","published_at":"2025-06-06T15:49:58Z","references":["https://osv.dev/vulnerability/GHSA-qx7g-fx8q-545g","https://github.com/Erudika/para/security/advisories/GHSA-qx7g-fx8q-545g","https://nvd.nist.gov/vuln/detail/CVE-2025-49009","https://github.com/Erudika/para/commit/46a908d887da02037384193f70a69345f04887cf","https://github.com/Erudika/para"],"severity":{"label":"medium","score":6.2},"sources":[{"source":"osv","source_id":"GHSA-qx7g-fx8q-545g","url":"https://osv.dev/vulnerability/GHSA-qx7g-fx8q-545g"}],"summary":"Para Inserts Sensitive Information into Log File for Facebook authentication"}