{"action":"Upgrade django-s3file to 5.5.1 or later.","affected":[{"fixed":"5.5.1","introduced":"0"}],"component":"django-s3file","cve_ids":["CVE-2022-24840"],"ecosystem":"PyPI","epss":0.02067,"exploited":false,"fixed_versions":["5.5.1"],"ghsa_id":"GHSA-4w8f-hjm9-xwgf","id":"tcs_01M5KEZB2JBBXYKEACBESB2NNX","modified_at":"2025-02-17T05:51:34.327997Z","published_at":"2022-06-06T21:24:24Z","references":["https://osv.dev/vulnerability/GHSA-4w8f-hjm9-xwgf","https://github.com/codingjoe/django-s3file/security/advisories/GHSA-4w8f-hjm9-xwgf","https://nvd.nist.gov/vuln/detail/CVE-2022-24840","https://github.com/codingjoe/django-s3file/commit/68ccd2c621a40eb66fdd6af2be9d5fcc9c373318","https://github.com/codingjoe/django-s3file","https://github.com/codingjoe/django-s3file/releases/tag/5.5.1","https://github.com/pypa/advisory-database/tree/main/vulns/django-s3file/PYSEC-2022-208.yaml"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-4w8f-hjm9-xwgf","url":"https://osv.dev/vulnerability/GHSA-4w8f-hjm9-xwgf"}],"summary":"Path Traversal in django-s3file"}