{"action":"Upgrade convert-svg-core to 0.6.4 or later.","affected":[{"fixed":"0.6.4","introduced":"0"}],"component":"convert-svg-core","cve_ids":["CVE-2022-24278"],"ecosystem":"npm","epss":0.02213,"exploited":false,"fixed_versions":["0.6.4"],"ghsa_id":"GHSA-5f47-rcg5-9m24","id":"tcs_01M5KF3D9A20EWJXB4K5Y1W412","modified_at":"2026-09-10T03:49:49.167985748Z","published_at":"2022-06-11T00:00:18Z","references":["https://osv.dev/vulnerability/GHSA-5f47-rcg5-9m24","https://nvd.nist.gov/vuln/detail/CVE-2022-24278","https://github.com/neocotic/convert-svg/issues/86","https://github.com/neocotic/convert-svg/pull/87","https://github.com/neocotic/convert-svg/commit/2bbc498c5029238637206661dbac9e44d37d17c5","https://github.com/neocotic/convert-svg","https://snyk.io/vuln/SNYK-JS-CONVERTSVGCORE-2859830"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-5f47-rcg5-9m24","url":"https://osv.dev/vulnerability/GHSA-5f47-rcg5-9m24"}],"summary":"Directory traversal in convert-svg-core"}