{"id":"CVE-2026-63325","summary":"Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`","details":"Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor, prototype, or __proto__ properties in packages/respect-core/src/modules/context-parser/get-value-from-context.ts, reach the JavaScript Function constructor, and execute arbitrary code when a user processes an untrusted description. The executed code runs with the privileges of the CLI process and can execute shell commands or read CI secrets. Users processing only trusted, self-authored workflows are not affected. This issue is fixed in @redocly/respect-core and @redocly/cli version 2.33.0.","aliases":["GHSA-xw2f-5386-m542"],"modified":"2026-09-18T03:48:30.096678204Z","published":"2026-09-16T19:07:44.847Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63325.json","cna_assigner":"GitHub_M","cwe_ids":["CWE-94","CWE-95"]},"references":[{"type":"WEB","url":"https://github.com/Redocly/redocly-cli/releases/tag/@redocly/respect-core@1.34.17"},{"type":"WEB","url":"https://github.com/Redocly/redocly-cli/releases/tag/@redocly/respect-core@2.33.0"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63325.json"},{"type":"ADVISORY","url":"https://github.com/Redocly/redocly-cli/security/advisories/GHSA-xw2f-5386-m542"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63325"},{"type":"FIX","url":"https://github.com/Redocly/redocly-cli/commit/d26d452368066be1400f43cea915dd9ea508e18b"},{"type":"FIX","url":"https://github.com/Redocly/redocly-cli/pull/2881"},{"type":"FIX","url":"https://github.com/Redocly/redocly-cli/pull/2922"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/redocly/redocly-cli","events":[{"introduced":"0"},{"introduced":"f1c8186fc9cf6224ce60b77c0a99fa2469674075"},{"fixed":"b0aaa23ff07a4a2fa8627faea2e022e4282cecbc"},{"fixed":"3bb5d1aa6ee64253211b96580cf67f90d93adb47"},{"fixed":"d26d452368066be1400f43cea915dd9ea508e18b"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"1.34.17"},{"introduced":"2.0.0"},{"fixed":"2.33.0"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["@redocly/respect-core@1.34.16","@redocly/openapi-core@1.34.16","@redocly/cli@1.34.16","@redocly/respect-core@1.34.15","@redocly/openapi-core@1.34.15","@redocly/cli@1.34.15","@redocly/respect-core@2.32.2","@redocly/openapi-core@2.32.2","@redocly/cli@2.32.2","@redocly/respect-core@2.32.1","@redocly/openapi-core@2.32.1","@redocly/cli@2.32.1","@redocly/respect-core@2.32.0","@redocly/openapi-core@2.32.0","@redocly/cli@2.32.0","@redocly/respect-core@2.31.6","@redocly/openapi-core@2.31.6","@redocly/cli@2.31.6","@redocly/respect-core@2.31.5","@redocly/openapi-core@2.31.5","@redocly/cli@2.31.5","@redocly/respect-core@2.31.4","@redocly/openapi-core@2.31.4","@redocly/cli@2.31.4","@redocly/respect-core@1.34.14","@redocly/openapi-core@1.34.14","@redocly/cli@1.34.14","@redocly/respect-core@2.31.3","@redocly/openapi-core@2.31.3","@redocly/cli@2.31.3","@redocly/respect-core@2.31.2","@redocly/openapi-core@2.31.2","@redocly/cli@2.31.2","@redocly/respect-core@2.31.1","@redocly/openapi-core@2.31.1","@redocly/cli@2.31.1","@redocly/respect-core@2.31.0","@redocly/openapi-core@2.31.0","@redocly/cli@2.31.0","@redocly/respect-core@2.30.6","@redocly/openapi-core@2.30.6","@redocly/cli@2.30.6","@redocly/respect-core@2.30.5","@redocly/openapi-core@2.30.5","@redocly/cli@2.30.5","@redocly/respect-core@2.30.4","@redocly/openapi-core@2.30.4","@redocly/cli@2.30.4","@redocly/respect-core@1.34.13","@redocly/openapi-core@1.34.13","@redocly/cli@1.34.13","@redocly/respect-core@2.30.3","@redocly/openapi-core@2.30.3","@redocly/cli@2.30.3","@redocly/respect-core@2.30.2","@redocly/openapi-core@2.30.2","@redocly/cli@2.30.2","@redocly/respect-core@2.30.1","@redocly/openapi-core@2.30.1","@redocly/cli@2.30.1","@redocly/respect-core@1.34.12","@redocly/openapi-core@1.34.12","@redocly/cli@1.34.12","@redocly/respect-core@2.30.0","@redocly/openapi-core@2.30.0","@redocly/cli@2.30.0","@redocly/respect-core@2.29.2","@redocly/openapi-core@2.29.2","@redocly/cli@2.29.2","@redocly/respect-core@2.29.0","@redocly/openapi-core@2.29.0","@redocly/cli@2.29.0","@redocly/respect-core@2.29.1","@redocly/openapi-core@2.29.1","@redocly/cli@2.29.1","@redocly/respect-core@1.34.11","@redocly/openapi-core@1.34.11","@redocly/cli@1.34.11","@redocly/respect-core@2.28.1","@redocly/openapi-core@2.28.1","@redocly/cli@2.28.1","@redocly/respect-core@2.28.0","@redocly/openapi-core@2.28.0","@redocly/cli@2.28.0","@redocly/respect-core@2.27.1","@redocly/openapi-core@2.27.1","@redocly/cli@2.27.1","@redocly/respect-core@2.27.0","@redocly/openapi-core@2.27.0","@redocly/cli@2.27.0","@redocly/respect-core@2.26.0","@redocly/openapi-core@2.26.0","@redocly/cli@2.26.0","@redocly/respect-core@2.25.4","@redocly/openapi-core@2.25.4","@redocly/cli@2.25.4","@redocly/respect-core@2.25.3","@redocly/openapi-core@2.25.3","@redocly/cli@2.25.3","@redocly/respect-core@2.25.2","@redocly/openapi-core@2.25.2","@redocly/cli@2.25.2","@redocly/respect-core@2.25.1","@redocly/openapi-core@2.25.1","@redocly/cli@2.25.1","@redocly/respect-core@2.25.0","@redocly/openapi-core@2.25.0","@redocly/cli@2.25.0","@redocly/respect-core@2.24.1","@redocly/openapi-core@2.24.1","@redocly/cli@2.24.1","@redocly/respect-core@2.24.0","@redocly/openapi-core@2.24.0","@redocly/cli@2.24.0","@redocly/respect-core@2.23.0","@redocly/openapi-core@2.23.0","@redocly/cli@2.23.0","@redocly/respect-core@2.22.1","@redocly/openapi-core@2.22.1","@redocly/cli@2.22.1","@redocly/respect-core@2.22.0","@redocly/openapi-core@2.22.0","@redocly/cli@2.22.0","@redocly/respect-core@1.34.10","@redocly/openapi-core@1.34.10","@redocly/cli@1.34.10","@redocly/respect-core@2.21.1","@redocly/openapi-core@2.21.1","@redocly/cli@2.21.1","@redocly/respect-core@2.21.0","@redocly/openapi-core@2.21.0","@redocly/cli@2.21.0","@redocly/respect-core@2.20.5","@redocly/openapi-core@2.20.5","@redocly/cli@2.20.5","@redocly/respect-core@2.20.4","@redocly/openapi-core@2.20.4","@redocly/cli@2.20.4","@redocly/respect-core@2.20.3","@redocly/openapi-core@2.20.3","@redocly/cli@2.20.3","@redocly/respect-core@2.20.2","@redocly/openapi-core@2.20.2","@redocly/cli@2.20.2","@redocly/respect-core@1.34.9","@redocly/openapi-core@1.34.9","@redocly/cli@1.34.9","@redocly/respect-core@2.20.1","@redocly/openapi-core@2.20.1","@redocly/cli@2.20.1","@redocly/respect-core@1.34.8","@redocly/openapi-core@1.34.8","@redocly/cli@1.34.8","@redocly/respect-core@2.20.0","@redocly/openapi-core@2.20.0","@redocly/cli@2.20.0","@redocly/respect-core@2.19.2","@redocly/openapi-core@2.19.2","@redocly/cli@2.19.2","@redocly/respect-core@1.34.7","@redocly/openapi-core@1.34.7","@redocly/cli@1.34.7","@redocly/respect-core@2.19.1","@redocly/openapi-core@2.19.1","@redocly/cli@2.19.1","@redocly/respect-core@2.19.0","@redocly/openapi-core@2.19.0","@redocly/cli@2.19.0","@redocly/respect-core@1.34.6","@redocly/openapi-core@1.34.6","@redocly/cli@1.34.6","@redocly/respect-core@2.18.2","@redocly/openapi-core@2.18.2","@redocly/cli@2.18.2","@redocly/respect-core@2.18.1","@redocly/openapi-core@2.18.1","@redocly/cli@2.18.1","@redocly/respect-core@2.18.0","@redocly/openapi-core@2.18.0","@redocly/cli@2.18.0","@redocly/respect-core@2.17.0","@redocly/openapi-core@2.17.0","@redocly/cli@2.17.0","@redocly/respect-core@2.16.0","@redocly/openapi-core@2.16.0","@redocly/cli@2.16.0","@redocly/respect-core@2.15.2","@redocly/openapi-core@2.15.2","@redocly/cli@2.15.2","@redocly/respect-core@2.15.1","@redocly/openapi-core@2.15.1","@redocly/cli@2.15.1","@redocly/respect-core@2.15.0","@redocly/openapi-core@2.15.0","@redocly/cli@2.15.0","@redocly/respect-core@2.14.9","@redocly/openapi-core@2.14.9","@redocly/cli@2.14.9","@redocly/respect-core@2.14.8","@redocly/openapi-core@2.14.8","@redocly/cli@2.14.8","@redocly/respect-core@2.14.7","@redocly/openapi-core@2.14.7","@redocly/cli@2.14.7","@redocly/respect-core@2.14.6","@redocly/openapi-core@2.14.6","@redocly/cli@2.14.6","@redocly/respect-core@2.14.5","@redocly/openapi-core@2.14.5","@redocly/cli@2.14.5","@redocly/respect-core@2.14.4","@redocly/openapi-core@2.14.4","@redocly/cli@2.14.4","@redocly/respect-core@2.14.3","@redocly/openapi-core@2.14.3","@redocly/cli@2.14.3","@redocly/respect-core@2.14.2","@redocly/openapi-core@2.14.2","@redocly/cli@2.14.2","@redocly/respect-core@2.14.1","@redocly/openapi-core@2.14.1","@redocly/cli@2.14.1","@redocly/respect-core@2.14.0","@redocly/openapi-core@2.14.0","@redocly/cli@2.14.0","@redocly/respect-core@2.12.7","@redocly/openapi-core@2.12.7","@redocly/cli@2.12.7","@redocly/respect-core@2.13.0","@redocly/openapi-core@2.13.0","@redocly/cli@2.13.0","@redocly/respect-core@2.12.6","@redocly/openapi-core@2.12.6","@redocly/cli@2.12.6","@redocly/respect-core@2.12.5","@redocly/openapi-core@2.12.5","@redocly/cli@2.12.5","@redocly/respect-core@1.34.5","@redocly/openapi-core@1.34.5","@redocly/cli@1.34.5","@redocly/respect-core@2.12.4","@redocly/openapi-core@2.12.4","@redocly/cli@2.12.4","@redocly/respect-core@2.12.3","@redocly/openapi-core@2.12.3","@redocly/cli@2.12.3","@redocly/respect-core@2.12.2","@redocly/openapi-core@2.12.2","@redocly/cli@2.12.2","@redocly/respect-core@2.12.1","@redocly/openapi-core@2.12.1","@redocly/cli@2.12.1","@redocly/respect-core@2.12.0","@redocly/openapi-core@2.12.0","@redocly/cli@2.12.0","@redocly/respect-core@2.11.1","@redocly/openapi-core@2.11.1","@redocly/cli@2.11.1","@redocly/respect-core@2.11.0","@redocly/openapi-core@2.11.0","@redocly/cli@2.11.0","@redocly/respect-core@2.10.0","@redocly/openapi-core@2.10.0","@redocly/cli@2.10.0","@redocly/respect-core@2.9.0","@redocly/openapi-core@2.9.0","@redocly/cli@2.9.0","@redocly/respect-core@2.8.0","@redocly/openapi-core@2.8.0","@redocly/cli@2.8.0","@redocly/respect-core@2.7.1","@redocly/openapi-core@2.7.1","@redocly/cli@2.7.1","@redocly/respect-core@2.7.0","@redocly/openapi-core@2.7.0","@redocly/cli@2.7.0","@redocly/respect-core@2.6.0","@redocly/openapi-core@2.6.0","@redocly/cli@2.6.0","@redocly/respect-core@2.5.1","@redocly/openapi-core@2.5.1","@redocly/cli@2.5.1","@redocly/respect-core@2.5.0","@redocly/openapi-core@2.5.0","@redocly/cli@2.5.0","@redocly/respect-core@2.4.0","@redocly/openapi-core@2.4.0","@redocly/cli@2.4.0","@redocly/respect-core@2.3.1","@redocly/openapi-core@2.3.1","@redocly/cli@2.3.1","@redocly/respect-core@2.3.0","@redocly/openapi-core@2.3.0","@redocly/cli@2.3.0","@redocly/respect-core@2.2.3","@redocly/openapi-core@2.2.3","@redocly/cli@2.2.3","@redocly/respect-core@2.2.2","@redocly/openapi-core@2.2.2","@redocly/cli@2.2.2","@redocly/respect-core@2.2.1","@redocly/openapi-core@2.2.1","@redocly/cli@2.2.1","@redocly/respect-core@2.2.0","@redocly/openapi-core@2.2.0","@redocly/cli@2.2.0","@redocly/respect-core@2.1.5","@redocly/openapi-core@2.1.5","@redocly/cli@2.1.5","@redocly/respect-core@2.1.4","@redocly/openapi-core@2.1.4","@redocly/cli@2.1.4","@redocly/respect-core@2.1.3","@redocly/openapi-core@2.1.3","@redocly/cli@2.1.3","@redocly/respect-core@2.1.2","@redocly/openapi-core@2.1.2","@redocly/cli@2.1.2","@redocly/respect-core@2.1.1","@redocly/openapi-core@2.1.1","@redocly/cli@2.1.1","@redocly/respect-core@2.1.0","@redocly/openapi-core@2.1.0","@redocly/cli@2.1.0","@redocly/respect-core@2.0.8","@redocly/openapi-core@2.0.8","@redocly/cli@2.0.8","@redocly/respect-core@2.0.7","@redocly/openapi-core@2.0.7","@redocly/cli@2.0.7","@redocly/respect-core@2.0.6","@redocly/openapi-core@2.0.6","@redocly/cli@2.0.6","@redocly/respect-core@2.0.5","@redocly/openapi-core@2.0.5","@redocly/cli@2.0.5","@redocly/respect-core@2.0.4","@redocly/openapi-core@2.0.4","@redocly/cli@2.0.4","@redocly/respect-core@2.0.3","@redocly/openapi-core@2.0.3","@redocly/cli@2.0.3","@redocly/respect-core@2.0.2","@redocly/openapi-core@2.0.2","@redocly/cli@2.0.2","@redocly/respect-core@2.0.1","@redocly/openapi-core@2.0.1","@redocly/cli@2.0.1","@redocly/respect-core@2.0.0","@redocly/openapi-core@2.0.0","@redocly/cli@2.0.0","@redocly/respect-core@1.34.4","@redocly/openapi-core@1.34.4","@redocly/cli@1.34.4","@redocly/respect-core@1.34.3","@redocly/openapi-core@1.34.3","@redocly/cli@1.34.3","@redocly/respect-core@1.34.2","@redocly/openapi-core@1.34.2","@redocly/cli@1.34.2","@redocly/respect-core@1.34.1","@redocly/openapi-core@1.34.1","@redocly/cli@1.34.1","@redocly/respect-core@1.34.0","@redocly/openapi-core@1.34.0","@redocly/cli@1.34.0","@redocly/respect-core@1.33.1","@redocly/openapi-core@1.33.1","@redocly/cli@1.33.1","@redocly/respect-core@1.33.0","@redocly/openapi-core@1.33.0","@redocly/cli@1.33.0","@redocly/respect-core@1.32.2","@redocly/openapi-core@1.32.2","@redocly/cli@1.32.2","@redocly/respect-core@1.32.1","@redocly/openapi-core@1.32.1","@redocly/cli@1.32.1","@redocly/respect-core@1.32.0","@redocly/openapi-core@1.32.0","@redocly/cli@1.32.0","@redocly/respect-core@1.31.3","@redocly/openapi-core@1.31.3","@redocly/cli@1.31.3","@redocly/respect-core@1.31.2","@redocly/openapi-core@1.31.2","@redocly/cli@1.31.2","@redocly/respect-core@1.31.1","@redocly/openapi-core@1.31.1","@redocly/cli@1.31.1","@redocly/respect-core@1.31.0","@redocly/openapi-core@1.31.0","@redocly/cli@1.31.0","@redocly/openapi-core@1.30.0","@redocly/cli@1.30.0","@redocly/openapi-core@1.29.0","@redocly/cli@1.29.0","@redocly/openapi-core@1.28.5","@redocly/cli@1.28.5","@redocly/openapi-core@1.28.4","@redocly/cli@1.28.4","@redocly/openapi-core@1.28.3","@redocly/cli@1.28.3","@redocly/openapi-core@1.28.2","@redocly/cli@1.28.2","@redocly/openapi-core@1.28.1","@redocly/cli@1.28.1","@redocly/openapi-core@1.28.0","@redocly/cli@1.28.0","@redocly/openapi-core@1.27.2","@redocly/cli@1.27.2","@redocly/openapi-core@1.27.1","@redocly/cli@1.27.1","@redocly/openapi-core@1.27.0","@redocly/cli@1.27.0","@redocly/openapi-core@1.26.1","@redocly/cli@1.26.1","@redocly/openapi-core@1.26.0","@redocly/cli@1.26.0","@redocly/openapi-core@1.25.15","@redocly/cli@1.25.15","@redocly/openapi-core@1.25.14","@redocly/cli@1.25.14","@redocly/openapi-core@1.25.13","@redocly/cli@1.25.13","@redocly/openapi-core@1.25.12","@redocly/cli@1.25.12","@redocly/openapi-core@1.25.11","@redocly/cli@1.25.11","@redocly/openapi-core@1.25.10","@redocly/cli@1.25.10","@redocly/openapi-core@1.25.9","@redocly/cli@1.25.9","@redocly/openapi-core@1.25.8","@redocly/cli@1.25.8","@redocly/openapi-core@1.25.7","@redocly/cli@1.25.7","@redocly/openapi-core@1.25.6","@redocly/cli@1.25.6","@redocly/openapi-core@1.25.5","@redocly/cli@1.25.5","@redocly/openapi-core@1.25.4","@redocly/cli@1.25.4","@redocly/openapi-core@1.25.3","@redocly/cli@1.25.3","@redocly/openapi-core@1.25.2","@redocly/cli@1.25.2","@redocly/openapi-core@1.25.1","@redocly/cli@1.25.1","@redocly/openapi-core@1.25.0","@redocly/cli@1.25.0","@redocly/openapi-core@1.24.0","@redocly/cli@1.24.0","@redocly/openapi-core@1.23.1","@redocly/cli@1.23.1","@redocly/openapi-core@1.23.0","@redocly/cli@1.23.0","@redocly/openapi-core@1.22.1","@redocly/cli@1.22.1","@redocly/openapi-core@1.22.0","@redocly/cli@1.22.0","@redocly/openapi-core@1.21.1","@redocly/cli@1.21.1","@redocly/openapi-core@1.21.0","@redocly/cli@1.21.0","@redocly/openapi-core@1.20.1","@redocly/cli@1.20.1","@redocly/openapi-core@1.20.0","@redocly/cli@1.20.0","@redocly/openapi-core@1.19.0","@redocly/cli@1.19.0","@redocly/openapi-core@1.18.1","@redocly/cli@1.18.1","@redocly/openapi-core@1.18.0","@redocly/cli@1.18.0","@redocly/openapi-core@1.17.1","@redocly/cli@1.17.1","@redocly/openapi-core@1.17.0","@redocly/cli@1.17.0","@redocly/openapi-core@1.16.0","@redocly/cli@1.16.0","@redocly/openapi-core@1.15.0","@redocly/cli@1.15.0","@redocly/openapi-core@1.14.0","@redocly/cli@1.14.0","@redocly/openapi-core@1.13.0","@redocly/cli@1.13.0","@redocly/openapi-core@1.12.2","@redocly/cli@1.12.2","@redocly/openapi-core@1.12.1","@redocly/cli@1.12.1","@redocly/openapi-core@1.12.0","@redocly/cli@1.12.0","@redocly/openapi-core@1.11.0","@redocly/cli@1.11.0","@redocly/openapi-core@1.10.6","@redocly/cli@1.10.6","@redocly/openapi-core@1.10.5","@redocly/cli@1.10.5","@redocly/openapi-core@1.10.4","@redocly/cli@1.10.4","@redocly/openapi-core@1.10.3","@redocly/cli@1.10.3","@redocly/openapi-core@1.10.2","@redocly/cli@1.10.2","@redocly/openapi-core@1.10.1","@redocly/cli@1.10.1","@redocly/openapi-core@1.10.0","@redocly/cli@1.10.0","@redocly/openapi-core@1.9.1","@redocly/cli@1.9.1","@redocly/openapi-core@1.9.0","@redocly/cli@1.9.0","@redocly/openapi-core@1.8.2","@redocly/cli@1.8.2","@redocly/openapi-core@1.8.1","@redocly/cli@1.8.1","@redocly/openapi-core@1.8.0","@redocly/cli@1.8.0","@redocly/openapi-core@1.7.0","@redocly/cli@1.7.0","@redocly/openapi-core@1.6.0","@redocly/cli@1.6.0","@redocly/openapi-core@1.5.0","@redocly/cli@1.5.0","@redocly/openapi-core@1.4.1","@redocly/cli@1.4.1","@redocly/openapi-core@1.4.0","@redocly/cli@1.4.0","@redocly/openapi-core@1.3.0","@redocly/cli@1.3.0","@redocly/openapi-core@1.2.1","@redocly/cli@1.2.1","@redocly/openapi-core@1.2.0","@redocly/cli@1.2.0","@redocly/openapi-core@1.1.0","@redocly/cli@1.1.0","@redocly/openapi-core@1.0.2","@redocly/cli@1.0.2","@redocly/openapi-core@1.0.1","@redocly/cli@1.0.1","v1.0.0","v1.0.0-rc.3","v1.0.0-rc.2","v1.0.0-rc.1","v1.0.0-beta.131","v1.0.0-beta.130","v1.0.0-beta.129","v1.0.0-beta.128","v1.0.0-beta.127","v1.0.0-beta.126","v1.0.0-beta.125","v1.0.0-beta.124","v1.0.0-beta.123","v1.0.0-beta.122","v1.0.0-beta.121","v1.0.0-beta.120","v1.0.0-beta.119","v1.0.0-beta.118","v1.0.0-beta.117","v1.0.0-beta.116","v1.0.0-beta.115","v1.0.0-beta.114","v1.0.0-beta.113","v1.0.0-beta.112","v1.0.0-beta.111","v1.0.0-beta.110","v1.0.0-beta.109","v1.0.0-beta.108","v1.0.0-beta.107","v1.0.0-beta.106","v1.0.0-beta.105","v1.0.0-beta.104","v1.0.0-beta.103","v1.0.0-beta.102","v1.0.0-beta.101","v1.0.0-beta.100","v1.0.0-beta.99","v1.0.0-beta.98","v1.0.0-beta.97","v1.0.0-beta.96","v1.0.0-beta.95","v1.0.0-beta.94","v1.0.0-beta.93","v1.0.0-beta.92","v1.0.0-beta.91","v1.0.0-beta.90","v1.0.0-beta.89","v1.0.0-beta.88","v1.0.0-beta.87","v1.0.0-beta.86","v1.0.0-beta.85","v1.0.0-beta.84","v1.0.0-beta.83","v1.0.0-beta.82","v1.0.0-beta.81","v1.0.0-beta.80","v1.0.0-beta.79","v1.0.0-beta.78","v1.0.0-beta.77","v1.0.0-beta.76","v1.0.0-beta.75","v1.0.0-beta.74","v1.0.0-beta.73","v1.0.0-beta.72","v1.0.0-beta.71","v1.0.0-beta.70","v1.0.0-beta.69","v1.0.0-beta.68","v1.0.0-beta.67","v1.0.0-beta.64","v1.0.0-beta.63","v1.0.0-beta.62","v1.0.0-beta.60","v1.0.0-beta.59","v1.0.0-beta.57","v1.0.0-beta.55","v1.0.0-beta.54","v1.0.0-beta.53","v1.0.0-beta.52","v1.0.0-beta.51","v1.0.0-beta.50","v1.0.0-beta.49","v1.0.0-beta.48","v1.0.0-beta.47","v1.0.0-beta.46","v1.0.0-beta.45","v1.0.0-beta.44","v1.0.0-beta.43","v1.0.0-beta.42","v1.0.0-beta.41","v1.0.0-beta.40","v1.0.0-beta.39","v1.0.0-beta.38","v1.0.0-beta.37","v1.0.0-beta.36","v1.0.0-beta.35","v1.0.0-beta.34","v1.0.0-beta.33","v1.0.0-beta.32","v1.0.0-beta.31","v1.0.0-beta.30","v1.0.0-beta.29","v1.0.0-beta.28","v1.0.0-beta.27","v1.0.0-beta.26","v1.0.0-beta.25","v1.0.0-beta.24","v1.0.0-beta.23","v1.0.0-beta.22","v1.0.0-beta.21","v1.0.0-beta.20","v1.0.0-beta.19","v1.0.0-beta.18","v1.0.0-beta.17","v1.0.0-beta.16","v1.0.0-beta.15","v1.0.0-beta.14","v1.0.0-beta.13","v1.0.0-beta.12","v1.0.0-beta.11","v1.0.0-beta.10","v1.0.0-beta.9","v0.2.12","v0.2.11","v0.2.10","v0.2.9","v0.2.7"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63325.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}