{"action":"Upgrade jszip to 3.8.0 or later.","affected":[{"fixed":"3.8.0","introduced":"0"}],"component":"jszip","cve_ids":["CVE-2022-48285"],"ecosystem":"npm","epss":0.01411,"exploited":false,"fixed_versions":["3.8.0"],"ghsa_id":"GHSA-36fh-84j7-cv5h","id":"tcs_01M5KEW7VZ37BFK3WWRQYGM7RC","modified_at":"2024-11-18T16:26:28Z","published_at":"2023-01-29T06:30:52Z","references":["https://osv.dev/vulnerability/GHSA-36fh-84j7-cv5h","https://nvd.nist.gov/vuln/detail/CVE-2022-48285","https://github.com/Stuk/jszip/commit/2edab366119c9ee948357c02f1206c28566cdf15","https://exchange.xforce.ibmcloud.com/vulnerabilities/244499","https://github.com/Stuk/jszip","https://github.com/Stuk/jszip/compare/v3.7.1...v3.8.0","https://security.netapp.com/advisory/ntap-20240621-0005","https://www.mend.io/vulnerability-database/WS-2023-0004"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-36fh-84j7-cv5h","url":"https://osv.dev/vulnerability/GHSA-36fh-84j7-cv5h"}],"summary":"JSZip contains Path Traversal via loadAsync"}