{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.0.31"}],"component":"socket.io-file","cve_ids":["CVE-2020-15779"],"ecosystem":"npm","epss":0.01581,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-9h4g-27m8-qjrg","id":"tcs_01M5KFFYDXDZ89AAERN525VFT2","modified_at":"2026-05-04T08:45:49.887196841Z","published_at":"2020-07-07T19:24:47Z","references":["https://osv.dev/vulnerability/GHSA-9h4g-27m8-qjrg","https://nvd.nist.gov/vuln/detail/CVE-2020-15779","https://github.com/advisories/GHSA-9h4g-27m8-qjrg","https://github.com/rico345100/socket.io-file","https://www.npmjs.com/advisories/1519","https://www.npmjs.com/package/socket.io-file"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-9h4g-27m8-qjrg","url":"https://osv.dev/vulnerability/GHSA-9h4g-27m8-qjrg"}],"summary":"Path Traversal in socket.io-file"}