{"action":"Upgrade geshi/geshi to 1.0.8.11 or later.","affected":[{"fixed":"1.0.8.11","introduced":"0"}],"component":"geshi/geshi","cve_ids":["CVE-2012-3521"],"ecosystem":"Packagist","epss":0.03174,"exploited":false,"fixed_versions":["1.0.8.11"],"ghsa_id":"GHSA-fw3x-2pr2-5j64","id":"tcs_01M5KF23602XWQ5DZ6K57Y71XG","modified_at":"2025-04-14T16:42:07.106169Z","published_at":"2022-05-17T04:42:16Z","references":["https://osv.dev/vulnerability/GHSA-fw3x-2pr2-5j64","https://nvd.nist.gov/vuln/detail/CVE-2012-3521","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=685324","https://github.com/GeSHi/geshi-1.0","http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105247.html","http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105273.html","http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105317.html","http://sourceforge.net/p/geshi/code/2507","http://www.openwall.com/lists/oss-security/2012/08/21/11"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-fw3x-2pr2-5j64","url":"https://osv.dev/vulnerability/GHSA-fw3x-2pr2-5j64"}],"summary":"GeSHi vulnerable to Directory Traversal"}