{"action":"Upgrade express-cart to 1.1.7 or later.","affected":[{"fixed":"1.1.7","introduced":"0"}],"component":"express-cart","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.1.7"],"ghsa_id":"GHSA-8h8v-6qqm-fwpq","id":"tcs_01M5KFD1YAECBGTZQRT157FM5A","modified_at":"2020-08-31T18:32:22Z","published_at":"2020-09-01T21:06:38Z","references":["https://osv.dev/vulnerability/GHSA-8h8v-6qqm-fwpq","https://hackerone.com/reports/343726","https://www.npmjs.com/advisories/676"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-8h8v-6qqm-fwpq","url":"https://osv.dev/vulnerability/GHSA-8h8v-6qqm-fwpq"}],"summary":"Path Traversal in express-cart"}