CVE-2025-65656

The dcat-admin package (v2.2.3-beta and before) is vulnerable to file inclusion within the admin/src/Extend/VersionManager.php component. The root cause is an Unsafe Dependency Resolution during the extension upload process, where an attacker can supply crafted input to the file inclusion mechani...