{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.7.24"}],"component":"getgrav/grav","cve_ids":["CVE-2021-3924"],"ecosystem":"Packagist","epss":0.04362,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-8c5p-4362-9333","id":"tcs_01M5KEYXHARRJ2TC7A0T01MV69","modified_at":"2023-11-08T04:06:34.967609Z","published_at":"2021-11-10T16:48:15Z","references":["https://osv.dev/vulnerability/GHSA-8c5p-4362-9333","https://nvd.nist.gov/vuln/detail/CVE-2021-3924","https://github.com/getgrav/grav/commit/8f9c417c04b89dc8d2de60b95e7696821b2826ce","https://github.com/getgrav/grav","https://huntr.dev/bounties/7ca13522-d0c9-4eff-a7dd-6fd1a7f205a2"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-8c5p-4362-9333","url":"https://osv.dev/vulnerability/GHSA-8c5p-4362-9333"}],"summary":"Path traversal in grav"}