{"action":"Upgrade pooledwebsocket to 0.0.19 or later.","affected":[{"fixed":"0.0.19","introduced":"0"}],"component":"pooledwebsocket","cve_ids":["CVE-2017-16107"],"ecosystem":"npm","epss":0.01974,"exploited":false,"fixed_versions":["0.0.19"],"ghsa_id":"GHSA-cfxm-4p54-5w7h","id":"tcs_01M5KFJMA2R5G6Q8WSVQ5P947R","modified_at":"2023-11-08T03:59:05.283972Z","published_at":"2018-07-24T00:20:57Z","references":["https://osv.dev/vulnerability/GHSA-cfxm-4p54-5w7h","https://nvd.nist.gov/vuln/detail/CVE-2017-16107","https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/pooledwebsocket","https://github.com/advisories/GHSA-cfxm-4p54-5w7h","https://www.npmjs.com/advisories/341"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cfxm-4p54-5w7h","url":"https://osv.dev/vulnerability/GHSA-cfxm-4p54-5w7h"}],"summary":"Directory traversal in pooledwebsocket"}