{"action":"Upgrade hyper-staticfile to 0.9.2 or later.","affected":[{"fixed":"0.9.2","introduced":"0"},{"fixed":"0.10.0-alpha.2","introduced":"0.10.0-alpha.1"}],"component":"hyper-staticfile","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.9.2","0.10.0-alpha.2"],"ghsa_id":"GHSA-7p7c-pvvx-2vx3","id":"tcs_01M5KEVBGNF7SKWYWK65SXTG55","modified_at":"2023-11-08T04:16:54.984322Z","published_at":"2022-12-05T22:03:46Z","references":["https://osv.dev/vulnerability/GHSA-7p7c-pvvx-2vx3","https://github.com/stephank/hyper-staticfile/issues/35","https://github.com/stephank/hyper-staticfile/pull/36","https://github.com/stephank/hyper-staticfile/commit/1e40e31d64bc6b32e595d24074092dcf84410b2b","https://github.com/stephank/hyper-staticfile","https://rustsec.org/advisories/RUSTSEC-2022-0069.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-7p7c-pvvx-2vx3","url":"https://osv.dev/vulnerability/GHSA-7p7c-pvvx-2vx3"}],"summary":"hyper-staticfile's improper validation of Windows paths could lead to directory traversal attack"}