{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/57482?format=json","vulnerability_id":"VCID-zeat-rzj9-u3br","summary":"Salt vulnerable to arbitrary event injection\nArbitrary event injection on Salt Master. The master's \"_minion_event\" method can be used by and authorized minion to send arbitrary events onto the master's event bus.","aliases":[{"alias":"CVE-2025-22239"},{"alias":"GHSA-c46w-gr7f-jm2p"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/73744?format=json","purl":"pkg:pypi/salt@3006.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-fxhr-smeg-k7fj"},{"vulnerability":"VCID-zudw-npmj-2qe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.12"},{"url":"http://public2.vulnerablecode.io/api/packages/73745?format=json","purl":"pkg:pypi/salt@3007.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-fxhr-smeg-k7fj"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3007.4"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/66769?format=json","purl":"pkg:pypi/salt@3006.0rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-ce2x-ehyk-nufk"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-nehw-r7zm-j7bb"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-rnh5-7394-dfea"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"},{"vulnerability":"VCID-zudw-npmj-2qe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.0rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/672649?format=json","purl":"pkg:pypi/salt@3006.0rc2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-ce2x-ehyk-nufk"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-nehw-r7zm-j7bb"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-rnh5-7394-dfea"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"},{"vulnerability":"VCID-zudw-npmj-2qe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.0rc2"},{"url":"http://public2.vulnerablecode.io/api/packages/672650?format=json","purl":"pkg:pypi/salt@3006.0rc3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-ce2x-ehyk-nufk"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-nehw-r7zm-j7bb"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-rnh5-7394-dfea"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"},{"vulnerability":"VCID-zudw-npmj-2qe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.0rc3"},{"url":"http://public2.vulnerablecode.io/api/packages/35630?format=json","purl":"pkg:pypi/salt@3006.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-32tp-s4fd-v7h2"},{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-ce2x-ehyk-nufk"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-fwpy-42pu-8ub3"},{"vulnerability":"VCID-nehw-r7zm-j7bb"},{"vulnerability":"VCID-qr6n-rx38-6fd2"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-rnh5-7394-dfea"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"},{"vulnerability":"VCID-zudw-npmj-2qe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.0"},{"url":"http://public2.vulnerablecode.io/api/packages/35631?format=json","purl":"pkg:pypi/salt@3006.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-32tp-s4fd-v7h2"},{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-ce2x-ehyk-nufk"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-fwpy-42pu-8ub3"},{"vulnerability":"VCID-nehw-r7zm-j7bb"},{"vulnerability":"VCID-qr6n-rx38-6fd2"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-rnh5-7394-dfea"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"},{"vulnerability":"VCID-zudw-npmj-2qe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.1"},{"url":"http://public2.vulnerablecode.io/api/packages/35632?format=json","purl":"pkg:pypi/salt@3006.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-32tp-s4fd-v7h2"},{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-fwpy-42pu-8ub3"},{"vulnerability":"VCID-qr6n-rx38-6fd2"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-rnh5-7394-dfea"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"},{"vulnerability":"VCID-zudw-npmj-2qe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.2"},{"url":"http://public2.vulnerablecode.io/api/packages/747924?format=json","purl":"pkg:pypi/salt@3006.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-32tp-s4fd-v7h2"},{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-fwpy-42pu-8ub3"},{"vulnerability":"VCID-qr6n-rx38-6fd2"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-rnh5-7394-dfea"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"},{"vulnerability":"VCID-zudw-npmj-2qe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.3"},{"url":"http://public2.vulnerablecode.io/api/packages/83259?format=json","purl":"pkg:pypi/salt@3006.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-32tp-s4fd-v7h2"},{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-fwpy-42pu-8ub3"},{"vulnerability":"VCID-qr6n-rx38-6fd2"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"},{"vulnerability":"VCID-zudw-npmj-2qe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.4"},{"url":"http://public2.vulnerablecode.io/api/packages/747925?format=json","purl":"pkg:pypi/salt@3006.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-32tp-s4fd-v7h2"},{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-fwpy-42pu-8ub3"},{"vulnerability":"VCID-qr6n-rx38-6fd2"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"},{"vulnerability":"VCID-zudw-npmj-2qe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.5"},{"url":"http://public2.vulnerablecode.io/api/packages/81946?format=json","purl":"pkg:pypi/salt@3006.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-fwpy-42pu-8ub3"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"},{"vulnerability":"VCID-zudw-npmj-2qe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.6"},{"url":"http://public2.vulnerablecode.io/api/packages/828821?format=json","purl":"pkg:pypi/salt@3006.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-fwpy-42pu-8ub3"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"},{"vulnerability":"VCID-zudw-npmj-2qe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.7"},{"url":"http://public2.vulnerablecode.io/api/packages/828822?format=json","purl":"pkg:pypi/salt@3006.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-fwpy-42pu-8ub3"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"},{"vulnerability":"VCID-zudw-npmj-2qe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.8"},{"url":"http://public2.vulnerablecode.io/api/packages/828823?format=json","purl":"pkg:pypi/salt@3006.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-fwpy-42pu-8ub3"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"},{"vulnerability":"VCID-zudw-npmj-2qe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.9"},{"url":"http://public2.vulnerablecode.io/api/packages/828824?format=json","purl":"pkg:pypi/salt@3006.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-fwpy-42pu-8ub3"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"},{"vulnerability":"VCID-zudw-npmj-2qe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.10"},{"url":"http://public2.vulnerablecode.io/api/packages/828825?format=json","purl":"pkg:pypi/salt@3006.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-fwpy-42pu-8ub3"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"},{"vulnerability":"VCID-zudw-npmj-2qe8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.11"},{"url":"http://public2.vulnerablecode.io/api/packages/85466?format=json","purl":"pkg:pypi/salt@3007.0rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3007.0rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/85491?format=json","purl":"pkg:pypi/salt@3007.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-fwpy-42pu-8ub3"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3007.0"},{"url":"http://public2.vulnerablecode.io/api/packages/828826?format=json","purl":"pkg:pypi/salt@3007.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-fwpy-42pu-8ub3"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3007.1"},{"url":"http://public2.vulnerablecode.io/api/packages/828827?format=json","purl":"pkg:pypi/salt@3007.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-fwpy-42pu-8ub3"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3007.2"},{"url":"http://public2.vulnerablecode.io/api/packages/828828?format=json","purl":"pkg:pypi/salt@3007.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-34yz-hgbf-abee"},{"vulnerability":"VCID-em78-j177-kffg"},{"vulnerability":"VCID-fwas-eecc-3bau"},{"vulnerability":"VCID-fwpy-42pu-8ub3"},{"vulnerability":"VCID-r4b7-j6au-fucm"},{"vulnerability":"VCID-sc4b-v7j2-byed"},{"vulnerability":"VCID-t99c-dqd5-ukfk"},{"vulnerability":"VCID-yt34-n551-1uau"},{"vulnerability":"VCID-zeat-rzj9-u3br"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3007.3"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-22239","reference_id":"","reference_type":"","scores":[{"value":"0.00144","scoring_system":"epss","scoring_elements":"0.34471","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00144","scoring_system":"epss","scoring_elements":"0.34507","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00144","scoring_system":"epss","scoring_elements":"0.34491","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-22239"},{"reference_url":"https://docs.saltproject.io/en/3006/topics/releases/3006.12.html","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-13T13:50:17Z/"}],"url":"https://docs.saltproject.io/en/3006/topics/releases/3006.12.html"},{"reference_url":"https://docs.saltproject.io/en/3007/topics/releases/3007.4.html","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-13T13:50:17Z/"}],"url":"https://docs.saltproject.io/en/3007/topics/releases/3007.4.html"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/saltstack/salt","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/saltstack/salt"},{"reference_url":"https://github.com/saltstack/salt/commit/41d834bf800d86fc496e4fac2d3875fc2aca7c62","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/saltstack/salt/commit/41d834bf800d86fc496e4fac2d3875fc2aca7c62"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-22239","reference_id":"CVE-2025-22239","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-22239"},{"reference_url":"https://github.com/advisories/GHSA-c46w-gr7f-jm2p","reference_id":"GHSA-c46w-gr7f-jm2p","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-c46w-gr7f-jm2p"}],"weaknesses":[{"cwe_id":285,"name":"Improper Authorization","description":"The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."}],"exploits":[],"severity_range_score":"7.0 - 8.9","exploitability":"0.5","weighted_severity":"8.0","risk_score":4.0,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zeat-rzj9-u3br"}