{"action":"Upgrade static-web-server to 2.30.0 or later.","affected":[{"fixed":"2.30.0","introduced":"0"}],"component":"static-web-server","cve_ids":["CVE-2024-32966"],"ecosystem":"crates.io","epss":0.00369,"exploited":false,"fixed_versions":["2.30.0"],"ghsa_id":"GHSA-rwfq-v4hq-h7fg","id":"tcs_01M5KF38EQTAXN4EFJE2VHKYHG","modified_at":"2024-05-01T16:58:38.728338Z","published_at":"2024-05-01T16:39:24Z","references":["https://osv.dev/vulnerability/GHSA-rwfq-v4hq-h7fg","https://github.com/static-web-server/static-web-server/security/advisories/GHSA-rwfq-v4hq-h7fg","https://nvd.nist.gov/vuln/detail/CVE-2024-32966","https://github.com/static-web-server/static-web-server","https://github.com/static-web-server/static-web-server/releases/tag/v2.30.0"],"severity":{"label":"medium","score":5.8},"sources":[{"source":"osv","source_id":"GHSA-rwfq-v4hq-h7fg","url":"https://osv.dev/vulnerability/GHSA-rwfq-v4hq-h7fg"}],"summary":"static-web-server vulnerable to stored Cross-site Scripting in directory listings via file names"}