{"action":"Upgrade commons-fileupload:commons-fileupload to 1.6.0 or later.","affected":[{"fixed":"1.6.0","introduced":"1.0"}],"component":"commons-fileupload:commons-fileupload","cve_ids":["CVE-2025-48976"],"ecosystem":"Maven","epss":0.32964,"exploited":false,"fixed_versions":["1.6.0"],"ghsa_id":"GHSA-vv7r-c36w-3prj","id":"tcs_01M5N9ETD5THG7MKBPE7CVAS71","modified_at":"2026-09-10T03:50:25.460226397Z","published_at":"2025-06-16T15:32:28Z","references":["https://osv.dev/vulnerability/GHSA-vv7r-c36w-3prj","https://nvd.nist.gov/vuln/detail/CVE-2025-48976","https://github.com/apache/commons-fileupload/commit/b247774a72a044f5d5380ae947140ee80af4e78b","https://github.com/apache/commons-fileupload/commit/bf68f63cfb312ef4710fb3dfb4d8e4e1665f4497","https://github.com/apache/tomcat/commit/97790a35a27d236fa053e660676c3f8196284d93","https://github.com/apache/commons-fileupload","https://lists.apache.org/thread/fbs3wrr3p67vkjcxogqqqqz45pqtso12","https://lists.debian.org/debian-lts-announce/2025/07/msg00008.html","https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html","http://www.openwall.com/lists/oss-security/2025/06/16/4"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-vv7r-c36w-3prj","url":"https://osv.dev/vulnerability/GHSA-vv7r-c36w-3prj"},{"source":"nvd","source_id":"CVE-2025-48976","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48976"}],"summary":"Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers"}