{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.0.31"}],"component":"socket.io-file","cve_ids":["CVE-2020-24807"],"ecosystem":"npm","epss":0.02096,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-6495-8jvh-f28x","id":"tcs_01M5KF5J87AV7S1Z4QASC4KRQ9","modified_at":"2026-05-04T08:46:09.191606680Z","published_at":"2020-10-02T15:39:54Z","references":["https://osv.dev/vulnerability/GHSA-6495-8jvh-f28x","https://nvd.nist.gov/vuln/detail/CVE-2020-24807","https://github.com/rico345100/socket.io-file","https://www.npmjs.com/advisories/1564"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-6495-8jvh-f28x","url":"https://osv.dev/vulnerability/GHSA-6495-8jvh-f28x"}],"summary":"File restriction bypass in socket.io-file"}