{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.1"}],"component":"webui-aria2","cve_ids":["CVE-2023-39141"],"ecosystem":"npm","epss":0.03367,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-crv8-r5wq-gv2w","id":"tcs_01M5KFKM5FBAYRJQ721ZM5T4QM","modified_at":"2024-02-28T19:12:08.528746Z","published_at":"2023-08-22T21:30:27Z","references":["https://osv.dev/vulnerability/GHSA-crv8-r5wq-gv2w","https://nvd.nist.gov/vuln/detail/CVE-2023-39141","https://gist.github.com/JafarAkhondali/528fe6c548b78f454911fb866b23f66e","https://github.com/ziahamza/webui-aria2","https://github.com/ziahamza/webui-aria2/blob/109903f0e2774cf948698cd95a01f77f33d7dd2c/node-server.js#L10"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-crv8-r5wq-gv2w","url":"https://osv.dev/vulnerability/GHSA-crv8-r5wq-gv2w"}],"summary":"webui-aria2 Path Traversal vulnerability"}