{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.0.0"}],"component":"serverlyr","cve_ids":["CVE-2017-16089"],"ecosystem":"npm","epss":0.01974,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-46q2-93hm-52p5","id":"tcs_01M5KEZM16JGMFT92771RZW72A","modified_at":"2023-11-08T03:59:04.183181Z","published_at":"2020-09-01T16:53:37Z","references":["https://osv.dev/vulnerability/GHSA-46q2-93hm-52p5","https://nvd.nist.gov/vuln/detail/CVE-2017-16089","https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serverlyr","https://www.npmjs.com/advisories/365"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-46q2-93hm-52p5","url":"https://osv.dev/vulnerability/GHSA-46q2-93hm-52p5"}],"summary":"Directory Traversal in serverlyr"}