{"action":"Upgrade fury-adapter-swagger to 0.9.7 or later.","affected":[{"fixed":"0.9.7","introduced":"0.2.0"}],"component":"fury-adapter-swagger","cve_ids":["CVE-2016-1000249"],"ecosystem":"npm","exploited":false,"fixed_versions":["0.9.7"],"ghsa_id":"GHSA-2r7f-4h2c-5x73","id":"tcs_01M5KETZ3054651B6VRVJ275G3","modified_at":"2023-11-08T03:58:08.519720Z","published_at":"2020-09-01T16:38:33Z","references":["https://osv.dev/vulnerability/GHSA-2r7f-4h2c-5x73","https://github.com/apiaryio/fury-adapter-swagger/pull/89","https://github.com/apiaryio/fury-adapter-swagger/commit/777e2d68f03546a88f3203bbd4725df8b1f662a7","https://github.com/apiaryio/fury-adapter-swagger/commit/f4407e3a5323bc31123d45dbc93b8417002e4d51#diff-54c345dc104dc19440f9c2482b7883df820e8b9b699fdd8fa07e2773e7197a29","https://github.com/apiaryio/fury-adapter-swagger","https://security.snyk.io/vuln/npm:fury-adapter-swagger:20161024","https://www.npmjs.com/advisories/305"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-2r7f-4h2c-5x73","url":"https://osv.dev/vulnerability/GHSA-2r7f-4h2c-5x73"}],"summary":"fury-adapter-swagger allows arbitrary file read from system"}