{"action":"Upgrade express-cart to 1.1.7 or later.","affected":[{"fixed":"1.1.7","introduced":"0"}],"component":"express-cart","cve_ids":["CVE-2018-3758"],"ecosystem":"npm","epss":0.27071,"exploited":false,"fixed_versions":["1.1.7"],"ghsa_id":"GHSA-4w62-cq5r-5mmq","id":"tcs_01M5KF1P5MTE4TEEZXVX3YCD8K","modified_at":"2024-04-01T22:27:14.759287Z","published_at":"2022-05-13T01:32:21Z","references":["https://osv.dev/vulnerability/GHSA-4w62-cq5r-5mmq","https://nvd.nist.gov/vuln/detail/CVE-2018-3758","https://github.com/mrvautin/expressCart/commit/65b18cfe426fa217aa6ada1d4162891883137893","https://hackerone.com/reports/343726"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-4w62-cq5r-5mmq","url":"https://osv.dev/vulnerability/GHSA-4w62-cq5r-5mmq"}],"summary":"express-cart unrestricted file upload vulnerability"}