{"action":"Upgrade electerm to 3.11.11 or later.","affected":[{"fixed":"3.11.11","introduced":"0"}],"component":"electerm","cve_ids":["CVE-2026-49253"],"ecosystem":"npm","epss":0.00439,"exploited":false,"fixed_versions":["3.11.11"],"ghsa_id":"GHSA-38j7-23hf-9mhc","id":"tcs_01M5KEWP2F85FW5YXYNHR9S74A","modified_at":"2026-07-02T19:41:33.209044Z","published_at":"2026-07-02T19:20:20Z","references":["https://osv.dev/vulnerability/GHSA-38j7-23hf-9mhc","https://github.com/electerm/electerm/security/advisories/GHSA-38j7-23hf-9mhc","https://github.com/electerm/electerm/commit/fde153d677a170c5816368f6586647f3af4ef284","https://github.com/electerm/electerm"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-38j7-23hf-9mhc","url":"https://osv.dev/vulnerability/GHSA-38j7-23hf-9mhc"}],"summary":"electerm has Path Traversal in Zmodem and Trzsz Download Filename Handling"}