{"action":"Upgrade oceanic.js to 1.10.4 or later.","affected":[{"fixed":"1.10.4","introduced":"0"}],"component":"oceanic.js","cve_ids":["CVE-2024-34712"],"ecosystem":"npm","epss":0.00556,"exploited":false,"fixed_versions":["1.10.4"],"ghsa_id":"GHSA-5h5v-hw44-f6gg","id":"tcs_01M5KF3V7HX72QQYBAPK8RYZQ1","modified_at":"2026-09-10T03:50:13.312360914Z","published_at":"2024-05-14T20:13:58Z","references":["https://osv.dev/vulnerability/GHSA-5h5v-hw44-f6gg","https://github.com/OceanicJS/Oceanic/security/advisories/GHSA-5h5v-hw44-f6gg","https://nvd.nist.gov/vuln/detail/CVE-2024-34712","https://github.com/OceanicJS/Oceanic/commit/8bf8ee8373b8c565fbdbf70a609aba4fbc1a1ffe","https://github.com/OceanicJS/Oceanic"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-5h5v-hw44-f6gg","url":"https://osv.dev/vulnerability/GHSA-5h5v-hw44-f6gg"}],"summary":"Oceanic allows unsanitized user input to lead to path traversal in URLs"}