{"action":"Upgrade path-sanitizer to 3.1.0 or later.","affected":[{"fixed":"3.1.0","introduced":"0"}],"component":"path-sanitizer","cve_ids":["CVE-2024-56198"],"ecosystem":"npm","epss":0.00743,"exploited":false,"fixed_versions":["3.1.0"],"ghsa_id":"GHSA-94p5-r7cc-3rpr","id":"tcs_01M5KFER0RNWBEM8M0C4H7WY7Q","modified_at":"2025-01-02T13:12:11.215053Z","published_at":"2025-01-02T12:52:42Z","references":["https://osv.dev/vulnerability/GHSA-94p5-r7cc-3rpr","https://github.com/cabraviva/path-sanitizer/security/advisories/GHSA-94p5-r7cc-3rpr","https://nvd.nist.gov/vuln/detail/CVE-2024-56198","https://github.com/cabraviva/path-sanitizer/commit/b6d2319eac910dffdfacc8460f5b5cc5a1518ead","https://github.com/cabraviva/path-sanitizer","https://www.loom.com/share/b766ece5193842848ce7562fcd559256?sid=fd826eb6-0eee-4601-bf0e-9cfee5c56e9d"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-94p5-r7cc-3rpr","url":"https://osv.dev/vulnerability/GHSA-94p5-r7cc-3rpr"},{"source":"nvd","source_id":"CVE-2024-56198","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56198"}],"summary":"path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability"}