CVE-2025-65278

High · 7.5

CVSS

7.5

EPSS

0.2%

Published

Nov 26, 2025

CISA due date

—

The record

An issue was discovered in file users.json in GroceryMart commit 21934e6 (2020-10-23) allowing unauthenticated attackers to gain sensitive information including plaintext usernames and passwords.

Affected packages

Ecosystem	Package	Introduced	Fixed