{"action":"Upgrade @asymmetric-effort/nogginlessdom to 0.0.22 or later.","affected":[{"fixed":"0.0.22","introduced":"0"}],"component":"@asymmetric-effort/nogginlessdom","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.0.22"],"ghsa_id":"GHSA-322x-v876-g883","id":"tcs_01M5KEVH4Q0YPGJD03RN9EQMQE","modified_at":"2026-09-10T03:50:51.247858898Z","published_at":"2026-07-02T20:19:20Z","references":["https://osv.dev/vulnerability/GHSA-322x-v876-g883","https://github.com/asymmetric-effort/NogginLessDom/security/advisories/GHSA-322x-v876-g883","https://github.com/asymmetric-effort/NogginLessDom/commit/785e6ac6e124d1a89b3ccf40bbd75fc8e4cb215d","https://github.com/asymmetric-effort/NogginLessDom"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-322x-v876-g883","url":"https://osv.dev/vulnerability/GHSA-322x-v876-g883"}],"summary":"@asymmetric-effort/nogginlessdom's Path Traversal in matchFileSnapshot allows arbitrary file write"}