{"action":"Upgrade github.com/entireio/cli to 0.7.7 or later.","affected":[{"fixed":"0.7.7","introduced":"0"}],"component":"github.com/entireio/cli","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.7.7"],"ghsa_id":"GHSA-2h46-9x5w-4wf7","id":"tcs_01M5KES5J26EK2JS702ND037E8","modified_at":"2026-06-25T18:56:38.830629248Z","published_at":"2026-06-19T15:00:01Z","references":["https://osv.dev/vulnerability/GHSA-2h46-9x5w-4wf7","https://github.com/entireio/cli/security/advisories/GHSA-2h46-9x5w-4wf7","https://github.com/entireio/cli/pull/1365","https://github.com/entireio/cli/pull/1449","https://github.com/entireio/cli"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-2h46-9x5w-4wf7","url":"https://osv.dev/vulnerability/GHSA-2h46-9x5w-4wf7"}],"summary":"Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind"}