{"action":"Upgrade iobroker.js-controller to 2.0.25 or later.","affected":[{"fixed":"2.0.25","introduced":"0"}],"component":"iobroker.js-controller","cve_ids":["CVE-2019-10767"],"ecosystem":"npm","epss":0.02158,"exploited":false,"fixed_versions":["2.0.25"],"ghsa_id":"GHSA-cmch-296j-wfvw","id":"tcs_01M5KFK3FYDXRKY3B6PWKS3S49","modified_at":"2026-09-10T03:49:24.747611278Z","published_at":"2019-12-02T18:06:14Z","references":["https://osv.dev/vulnerability/GHSA-cmch-296j-wfvw","https://nvd.nist.gov/vuln/detail/CVE-2019-10767","https://github.com/ioBroker/ioBroker.js-controller/commit/f6e292c6750a491a5000d0f851b2fede4f9e2fda","https://snyk.io/vuln/SNYK-JS-IOBROKERJSCONTROLLER-534881","https://www.npmjs.com/advisories/1419"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cmch-296j-wfvw","url":"https://osv.dev/vulnerability/GHSA-cmch-296j-wfvw"}],"summary":"Arbitrary File Write in iobroker.js-controller"}