{"action":"Upgrade @easy-team/easywebpack-cli to 4.5.2 or later.","affected":[{"fixed":"4.5.2","introduced":"0"}],"component":"@easy-team/easywebpack-cli","cve_ids":["CVE-2020-24855"],"ecosystem":"npm","epss":0.01074,"exploited":false,"fixed_versions":["4.5.2"],"ghsa_id":"GHSA-252h-2cmq-pmr6","id":"tcs_01M5KERYWCT4RHD40WER7NBP1C","modified_at":"2023-11-08T04:03:08.742041Z","published_at":"2022-12-15T21:30:28Z","references":["https://osv.dev/vulnerability/GHSA-252h-2cmq-pmr6","https://nvd.nist.gov/vuln/detail/CVE-2020-24855","https://github.com/easy-team/easywebpack-cli/issues/25","https://github.com/easy-team/easywebpack-cli/commit/eb3f54603f58ea706d0c03fd6eb76c94176eae52","https://github.com/easy-team/easywebpack-cli"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-252h-2cmq-pmr6","url":"https://osv.dev/vulnerability/GHSA-252h-2cmq-pmr6"}],"summary":"easywebpack-cli Path Traversal vulnerability"}