{"action":"Upgrade static-web-server to 2.40.1 or later.","affected":[{"fixed":"2.40.1","introduced":"0"}],"component":"static-web-server","cve_ids":["CVE-2025-67487"],"ecosystem":"crates.io","epss":0.00418,"exploited":false,"fixed_versions":["2.40.1"],"ghsa_id":"GHSA-459f-x8vq-xjjm","id":"tcs_01M5KESA7CTJ4K7MY9EKC4D7KJ","modified_at":"2025-12-09T19:36:56.381097Z","published_at":"2025-12-08T22:18:00Z","references":["https://osv.dev/vulnerability/GHSA-459f-x8vq-xjjm","https://github.com/static-web-server/static-web-server/security/advisories/GHSA-459f-x8vq-xjjm","https://nvd.nist.gov/vuln/detail/CVE-2025-67487","https://github.com/static-web-server/static-web-server/commit/308f0d26ceb9c2c8bd219315d0f53914763357f2","https://github.com/static-web-server/static-web-server"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-459f-x8vq-xjjm","url":"https://osv.dev/vulnerability/GHSA-459f-x8vq-xjjm"}],"summary":"Static Web Server vulnerable to a symbolic link path traversal"}