{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-21T02:39:03.869","vulnerabilities":[{"cve":{"id":"CVE-2025-48955","sourceIdentifier":"security-advisories@github.com","published":"2025-06-02T12:15:25.523","lastModified":"2026-04-15T00:35:42.020","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Para is a multitenant backend server/framework for object persistence and retrieval. A vulnerability that exists in versions prior to 1.50.8 exposes both access and secret keys in logs without redaction. These credentials are later reused in variable assignments for persistence but do not require logging for debugging or system health purposes. Version 1.50.8 fixes the issue."},{"lang":"es","value":"Para es un servidor/framework backend multiusuario para la persistencia y recuperación de objetos. Una vulnerabilidad presente en versiones anteriores a la 1.50.8 expone las claves de acceso y secretas en los registros sin censura. Estas credenciales se reutilizan posteriormente en la asignación de variables para la persistencia, pero no requieren registro para fines de depuración ni para el mantenimiento del sistema. La versión 1.50.8 corrige el problema."}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":3.6}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-532"}]}],"references":[{"url":"https://github.com/Erudika/para/commit/1e8a89558542854bb0683ab234c4429ad93b0835","source":"security-advisories@github.com"},{"url":"https://github.com/Erudika/para/security/advisories/GHSA-v75g-77vf-6jjq","source":"security-advisories@github.com"}]}}]}