{"action":"Upgrade next to 2.4.1 or later.","affected":[{"fixed":"2.4.1","introduced":"1.0.0"}],"component":"next","cve_ids":["CVE-2017-16877"],"ecosystem":"npm","epss":0.14104,"exploited":false,"fixed_versions":["2.4.1"],"ghsa_id":"GHSA-3f5c-4qxj-vmpf","id":"tcs_01M5KEX2WWXHXFJQJEKEYAB0BQ","modified_at":"2024-04-22T19:49:35Z","published_at":"2017-12-05T02:04:14Z","references":["https://osv.dev/vulnerability/GHSA-3f5c-4qxj-vmpf","https://nvd.nist.gov/vuln/detail/CVE-2017-16877","https://github.com/vercel/next.js/commit/02fe7cf63f6265d73bdaf8bc50a4f2fb539dcd00","https://github.com/zeit/next.js","https://github.com/zeit/next.js/releases/tag/2.4.1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-3f5c-4qxj-vmpf","url":"https://osv.dev/vulnerability/GHSA-3f5c-4qxj-vmpf"}],"summary":"Next.js Directory Traversal Vulnerability"}