{"action":"Upgrade github.com/owncast/owncast to 0.1.3 or later.","affected":[{"fixed":"0.1.3","introduced":"0"}],"component":"github.com/owncast/owncast","cve_ids":["CVE-2024-31450"],"ecosystem":"Go","epss":0.00969,"exploited":false,"fixed_versions":["0.1.3"],"ghsa_id":"GHSA-9355-27m8-h74v","id":"tcs_01M5KF4QRQNKZPC1EBC4Z7KN0Y","modified_at":"2024-11-18T16:27:00Z","published_at":"2024-08-05T21:29:26Z","references":["https://osv.dev/vulnerability/GHSA-9355-27m8-h74v","https://nvd.nist.gov/vuln/detail/CVE-2024-31450","https://github.com/owncast/owncast/commit/1b14800c7d7f54be14ed4d130bfe7f480645076e","https://github.com/owncast/owncast","https://github.com/owncast/owncast/blob/v0.1.2/controllers/admin/emoji.go#L63","https://github.com/owncast/owncast/releases/tag/v0.1.3","https://securitylab.github.com/advisories/GHSL-2023-277_Owncast"],"severity":{"label":"low","score":2.7},"sources":[{"source":"osv","source_id":"GHSA-9355-27m8-h74v","url":"https://osv.dev/vulnerability/GHSA-9355-27m8-h74v"}],"summary":"Owncast Path Traversal vulnerability"}