{"action":"Upgrade whistle to 2.10.3 or later.","affected":[{"fixed":"2.10.3","introduced":"0"}],"component":"whistle","cve_ids":["CVE-2026-55629"],"ecosystem":"npm","epss":0.00554,"exploited":false,"fixed_versions":["2.10.3"],"ghsa_id":"GHSA-3vfr-4gwf-qxfp","id":"tcs_01M5KEYABMER743FKBYRZNZ78B","modified_at":"2026-08-26T00:54:29.262025646Z","published_at":"2026-08-25T18:32:06Z","references":["https://osv.dev/vulnerability/GHSA-3vfr-4gwf-qxfp","https://github.com/avwo/whistle/security/advisories/GHSA-3vfr-4gwf-qxfp","https://nvd.nist.gov/vuln/detail/CVE-2026-55629","https://github.com/avwo/whistle/commit/777bcf69bae2972aa7138a158c91619185653cf5","https://github.com/avwo/whistle","http://github.com/avwo/whistle/releases/tag/v2.10.3"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-3vfr-4gwf-qxfp","url":"https://osv.dev/vulnerability/GHSA-3vfr-4gwf-qxfp"},{"source":"nvd","source_id":"CVE-2026-55629","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55629"}],"summary":"Whistle vulnerable to path traversal"}