{"action":"Upgrade github.com/google/safearchive to 0.0.0-20241025131057-f7ce9d7b6f9c or later.","affected":[{"introduced":"0"}],"component":"github.com/google/safearchive","cve_ids":["CVE-2024-10389"],"ecosystem":"Go","epss":0.00193,"exploited":false,"fixed_versions":["0.0.0-20241025131057-f7ce9d7b6f9c"],"ghsa_id":"GHSA-q3rp-vvm7-j8jg","id":"tcs_01M5KFJ81HDHGCN4PMS6D96VVQ","modified_at":"2025-07-23T22:13:25Z","published_at":"2024-11-04T12:32:56Z","references":["https://osv.dev/vulnerability/GHSA-q3rp-vvm7-j8jg","https://nvd.nist.gov/vuln/detail/CVE-2024-10389","https://github.com/google/safearchive/commit/f7ce9d7b6f9c6ecd72d0b0f16216b046e55e44dc","https://github.com/advisories/GHSA-q3rp-vvm7-j8jg","https://github.com/google/safearchive"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-q3rp-vvm7-j8jg","url":"https://osv.dev/vulnerability/GHSA-q3rp-vvm7-j8jg"}],"summary":"Safearchive Path Traversal vulnerability"}