# Patch Analysis - GHSA-33xw-247w-6hmc (CVE-2025-27520)

- Vulnerable version tested: 1.4.2 (installed via constraint <1.4.3)
- Latest patched version tested: 1.4.30
- Patch verification result: BLOCKED

Artifacts:
- Server logs (vulnerable): /root/.pruva/runs/ghsa-33xw-247w-6hmc_20260107-204845/bundle/logs/server.log
- Server logs (patched): /root/.pruva/runs/ghsa-33xw-247w-6hmc_20260107-204845/bundle/logs/server_patched.log
- Proof (vulnerable): /root/.pruva/runs/ghsa-33xw-247w-6hmc_20260107-204845/bundle/logs/rce_proof.txt
- Proof (patched): /root/.pruva/runs/ghsa-33xw-247w-6hmc_20260107-204845/bundle/logs/rce_proof_patched.txt
- Serde patch diff: /root/.pruva/runs/ghsa-33xw-247w-6hmc_20260107-204845/bundle/logs/patch_diff_1.4.2_latest.txt

Bypass attempts (10 variations of Content-Type) executed against patched server; see logs/patched_attempts.log