{"action":"Upgrade total.js to 3.2.3 or later.","affected":[{"fixed":"3.2.3","introduced":"0"}],"component":"total.js","cve_ids":["CVE-2019-8903"],"ecosystem":"npm","epss":0.72058,"exploited":false,"fixed_versions":["3.2.3"],"ghsa_id":"GHSA-3q32-j57w-q4w7","id":"tcs_01M5KEY0P9NNRGW2G21HXJ5YX0","modified_at":"2023-11-08T04:01:46.309593Z","published_at":"2019-02-20T15:40:13Z","references":["https://osv.dev/vulnerability/GHSA-3q32-j57w-q4w7","https://nvd.nist.gov/vuln/detail/CVE-2019-8903","https://github.com/totaljs/framework/commit/c37cafbf3e379a98db71c1125533d1e8d5b5aef7","https://github.com/totaljs/framework/commit/de16238d13848149f5d1dae51f54e397a525932b","https://blog.certimetergroup.com/it/articolo/security/total.js-directory-traversal-cve-2019-8903","https://github.com/advisories/GHSA-3q32-j57w-q4w7","https://github.com/totaljs/framework","https://www.npmjs.com/advisories/1026"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-3q32-j57w-q4w7","url":"https://osv.dev/vulnerability/GHSA-3q32-j57w-q4w7"}],"summary":"Path Traversal in total.js"}