{"action":"Upgrade agnai to 1.0.330 or later.","affected":[{"fixed":"1.0.330","introduced":"0"}],"component":"agnai","cve_ids":["CVE-2024-47171"],"ecosystem":"npm","epss":0.00495,"exploited":false,"fixed_versions":["1.0.330"],"ghsa_id":"GHSA-g54f-66mw-hv66","id":"tcs_01M5KFQ4YZGCK1F3NJNPFRKHGR","modified_at":"2024-09-26T21:11:07Z","published_at":"2024-09-26T18:16:13Z","references":["https://osv.dev/vulnerability/GHSA-g54f-66mw-hv66","https://github.com/agnaistic/agnai/security/advisories/GHSA-g54f-66mw-hv66","https://nvd.nist.gov/vuln/detail/CVE-2024-47171","https://github.com/agnaistic/agnai","https://github.com/agnaistic/agnai/blob/75abbd5b0f5e48ddecc805365cf1574d05ee1ce5/srv/api/character.ts#L140:","https://github.com/agnaistic/agnai/blob/75abbd5b0f5e48ddecc805365cf1574d05ee1ce5/srv/api/upload.ts#L55"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-g54f-66mw-hv66","url":"https://osv.dev/vulnerability/GHSA-g54f-66mw-hv66"}],"summary":"Agnai vulnerable to Relative Path Traversal in Image Upload"}