limbo.watch

In limbo for 523 days

GHSA-m6r3-c73x-8fw5

com.wildermods:WilderForge on Maven · published in wilderforge/wilderforge

Read the advisory on GitHub ↗

Fixed in 0.4.2.0. Dependabot, npm audit and OSV-Scanner won’t flag this yet. Find it in your project

Facts

Severity
Critical · CVSS score 9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected versions (com.wildermods:WilderForge)
<= 0.4.1.0As entered by the maintainer. Not reviewed.
Fixed in (com.wildermods:WilderForge)
>= 0.4.2.0
Affected versions (com.wildermods:ExampleMod)
<= 1.0.0.4As entered by the maintainer. Not reviewed.
Fixed in (com.wildermods:ExampleMod)
>= 1.0.0.5
Affected versions (com.wildermods.workspace:com.wildermods.workspace.gradle.plugin)
<= 5.2.0.0As entered by the maintainer. Not reviewed.
Fixed in (com.wildermods.workspace:com.wildermods.workspace.gradle.plugin)
>= 5.2.1.0
Affected versions (com.wildermods:provider)
<= 1.9.0.0As entered by the maintainer. Not reviewed.
Fixed in (com.wildermods:provider)
>= 1.9.1.0
Affected versions (com.wildermods:autosplitter)
< 36a1107de6a77f8353dd0aa14690aa3c7c3550efAs entered by the maintainer. Not reviewed.
Fixed in (com.wildermods:autosplitter)
>= 36a1107de6a77f8353dd0aa14690aa3c7c3550ef
Affected versions (com.wildermods:thrixlvault)
<= 0.5.0.0As entered by the maintainer. Not reviewed.
Fixed in (com.wildermods:thrixlvault)
>= 0.5.1.0
Affected versions (com.wildermods:masshash)
<= 1.3.0.2As entered by the maintainer. Not reviewed.
Fixed in (com.wildermods:masshash)
>= 1.3.1.0
Affected versions (com.wildermods:dlc_disabler)
<= 1.0.0.1As entered by the maintainer. Not reviewed.
Fixed in (com.wildermods:dlc_disabler)
>= 1.0.1.0
CVE
CVE-2025-49013 · published
GitHub Advisory Database
Not reviewed
OSV.dev
Not present
Other CVEs pointing here
None found in the CVE List

If you use com.wildermods:WilderForge <= 0.4.1.0

Upgrade to 0.4.2.0 or later. Dependabot, npm audit and OSV-Scanner won’t flag this yet.

Timeline

  1. 2025-06-07 14:37 UTC

    Published by the maintainers

    Cites CVE-2025-49013

  2. 2026-10-31 12:46 UTC

    First seen by Limbowatch

    not reviewed · not in OSV

  3. Waiting

    Reviewed by GitHub

  4. Waiting

    In OSV; scanners can see it

Machine-readable record: feed/GHSA-m6r3-c73x-8fw5.json