{"action":"Upgrade yarn to 1.22.0 or later.","affected":[{"fixed":"1.22.0","introduced":"0"}],"component":"yarn","cve_ids":["CVE-2020-8131"],"ecosystem":"npm","epss":0.05159,"exploited":false,"fixed_versions":["1.22.0"],"ghsa_id":"GHSA-8mfc-v7wv-p62g","id":"tcs_01M5KFDEG6RRT80CSXERY6C0HG","modified_at":"2023-11-08T04:04:13.896005Z","published_at":"2022-02-09T22:43:37Z","references":["https://osv.dev/vulnerability/GHSA-8mfc-v7wv-p62g","https://nvd.nist.gov/vuln/detail/CVE-2020-8131","https://github.com/yarnpkg/yarn/pull/7831","https://hackerone.com/reports/730239"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-8mfc-v7wv-p62g","url":"https://osv.dev/vulnerability/GHSA-8mfc-v7wv-p62g"}],"summary":"Path Traversal in Yarn"}