{"action":"Upgrade gatsby to 4.25.7 or later.","affected":[{"fixed":"4.25.7","introduced":"0"},{"fixed":"5.9.1","introduced":"5.0.0"}],"component":"gatsby","cve_ids":["CVE-2023-34238"],"ecosystem":"npm","epss":0.0091,"exploited":false,"fixed_versions":["4.25.7","5.9.1"],"ghsa_id":"GHSA-c6f8-8r25-c4gc","id":"tcs_01M5KFHXCNP5H08VWJ4Q5PEAFW","modified_at":"2023-11-08T04:12:45.277891Z","published_at":"2023-06-09T22:52:01Z","references":["https://osv.dev/vulnerability/GHSA-c6f8-8r25-c4gc","https://github.com/gatsbyjs/gatsby/security/advisories/GHSA-c6f8-8r25-c4gc","https://nvd.nist.gov/vuln/detail/CVE-2023-34238","https://github.com/gatsbyjs/gatsby/commit/ae5a654eb346b2e7a9d341b809b2f82d34c0f17c","https://github.com/gatsbyjs/gatsby/commit/fc22f4ba3ad7ca5fb3592f38f4f0ca8ae60b4bf7","https://github.com/gatsbyjs/gatsby"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-c6f8-8r25-c4gc","url":"https://osv.dev/vulnerability/GHSA-c6f8-8r25-c4gc"}],"summary":"Gatsby develop server has Local File Inclusion vulnerability"}