{"action":"Upgrade serve-static to 1.7.2 or later.","affected":[{"fixed":"1.7.2","introduced":"0"},{"fixed":"1.7.2","introduced":"1.7.0"}],"component":"serve-static","cve_ids":["CVE-2015-1164"],"ecosystem":"npm","epss":0.02616,"exploited":false,"fixed_versions":["1.7.2"],"ghsa_id":"GHSA-c3x7-gjmx-r2ff","id":"tcs_01M5KFHM6G9NBVXT1HYN1ZK3X7","modified_at":"2023-11-08T03:57:49.518349Z","published_at":"2020-08-31T22:57:02Z","references":["https://osv.dev/vulnerability/GHSA-c3x7-gjmx-r2ff","https://nvd.nist.gov/vuln/detail/CVE-2015-1164","https://github.com/expressjs/serve-static/issues/26","https://bugzilla.redhat.com/show_bug.cgi?id=1181917","https://exchange.xforce.ibmcloud.com/vulnerabilities/99936","https://github.com/expressjs/serve-static","https://snyk.io/vuln/npm:serve-static:20150113","https://www.npmjs.com/advisories/35","http://www.securityfocus.com/bid/72064"],"severity":{"label":"low","score":3.1},"sources":[{"source":"osv","source_id":"GHSA-c3x7-gjmx-r2ff","url":"https://osv.dev/vulnerability/GHSA-c3x7-gjmx-r2ff"}],"summary":"Open Redirect in serve-static"}