{"action":"Upgrade glance to 3.0.4 or later.","affected":[{"fixed":"3.0.4","introduced":"0"}],"component":"glance","cve_ids":["CVE-2018-3715"],"ecosystem":"npm","epss":0.01456,"exploited":false,"fixed_versions":["3.0.4"],"ghsa_id":"GHSA-2x4q-6jfv-8h9h","id":"tcs_01M5KEVB8QCMB48GPB46BPH955","modified_at":"2023-11-08T04:00:16.813310Z","published_at":"2018-07-26T14:53:14Z","references":["https://osv.dev/vulnerability/GHSA-2x4q-6jfv-8h9h","https://nvd.nist.gov/vuln/detail/CVE-2018-3715","https://github.com/jarofghosts/glance/commit/8cfd88e44ebd3f07e3a2eaf376a3e758b6c4ca19","https://hackerone.com/reports/310106","https://github.com/advisories/GHSA-2x4q-6jfv-8h9h","https://www.npmjs.com/advisories/590"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-2x4q-6jfv-8h9h","url":"https://osv.dev/vulnerability/GHSA-2x4q-6jfv-8h9h"}],"summary":"Path Traversal in glance"}