{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.4.2"}],"component":"swig","cve_ids":["CVE-2023-25345"],"ecosystem":"npm","epss":0.0105,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2rq5-699j-x7p6","id":"tcs_01M5KEV1KMBP6N2M3Q1GQW866G","modified_at":"2023-11-08T04:11:51.619627Z","published_at":"2023-03-15T21:30:25Z","references":["https://osv.dev/vulnerability/GHSA-2rq5-699j-x7p6","https://nvd.nist.gov/vuln/detail/CVE-2023-25345","https://github.com/node-swig/swig-templates/issues/88"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-2rq5-699j-x7p6#npm/swig","url":"https://osv.dev/vulnerability/GHSA-2rq5-699j-x7p6"}],"summary":"Arbitrary local file read vulnerability during template rendering"}