Threats affecting pkg:maven/gov.noaa.pmel.tmap/las

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 1.3%	CVE-2025-62193National Oceanic and Atmospheric Administration (NOAA) Live Access Server (LAS) · OS Command Injection Critical9.3EPSS 1.3%2026-01-15CVE Database V5CVE-2025-62193 Sites running NOAA PMEL Live Access Server (LAS) are vulnerable to remote code execution via specially crafted requests that include PyFerret expressions. By leveraging a SPAWN command, a remote, unauthenticated attacker can execute arbitrary OS commands. Fixed in a version of 'gov.noaa.pmel.tmap.las.filter.RequestInputFilter.java' from 2025-09-24. EPSS 1.3%Vulnerability CWE-78	CVE Database V5	2026-01-15

Page 1 of 1