{"action":"Upgrade atlasboard to 1.1.9 or later.","affected":[{"fixed":"1.1.9","introduced":"0"}],"component":"atlasboard","cve_ids":["CVE-2021-39109"],"ecosystem":"npm","epss":0.01669,"exploited":false,"fixed_versions":["1.1.9"],"ghsa_id":"GHSA-25pr-6pr6-68v7","id":"tcs_01M5KES2HCW63785PVZTEVHXR2","modified_at":"2025-09-29T16:41:02Z","published_at":"2021-09-02T17:17:25Z","references":["https://osv.dev/vulnerability/GHSA-25pr-6pr6-68v7","https://nvd.nist.gov/vuln/detail/CVE-2021-39109","https://arxiv.org/abs/2506.04962","https://arxiv.org/pdf/2506.04962","https://bitbucket.org/atlassian/atlasboard/commits/9c03df09f09399e2601010466e8ba3a28236eb9c","https://bitbucket.org/atlassian/atlasboard/pull-requests/91/buildeng-19379-apply-only-the-path","https://bitbucket.org/atlassian/atlasboard/src/master"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-25pr-6pr6-68v7","url":"https://osv.dev/vulnerability/GHSA-25pr-6pr6-68v7"}],"summary":"Path traversal in atlasboard"}