{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.13.0","last_affected":"0.17.2"}],"component":"zola","cve_ids":["CVE-2023-40274"],"ecosystem":"crates.io","epss":0.011,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xvv9-5j67-3rpq","id":"tcs_01M5KF504FHZQ4W77MRX6PYKBP","modified_at":"2026-09-10T03:50:03.071877650Z","published_at":"2023-08-14T03:30:32Z","references":["https://osv.dev/vulnerability/GHSA-xvv9-5j67-3rpq","https://nvd.nist.gov/vuln/detail/CVE-2023-40274","https://github.com/getzola/zola/issues/2257","https://github.com/getzola/zola/pull/2258","https://github.com/getzola/zola"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xvv9-5j67-3rpq","url":"https://osv.dev/vulnerability/GHSA-xvv9-5j67-3rpq"}],"summary":"zola Path Traversal vulnerability"}