CVE-2025-66906
Medium · 6.1CVSS
6.1
EPSS
0.1%
Published
Dec 19, 2025
CISA due date
—
The record
Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|