{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.2.0"}],"component":"serve-here","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-g8m7-qhv7-9h5x","id":"tcs_01M5KFR06VWYF7DXH9JN0W60CA","modified_at":"2021-09-22T18:35:22Z","published_at":"2019-07-05T21:07:14Z","references":["https://osv.dev/vulnerability/GHSA-g8m7-qhv7-9h5x","https://github.com/vivaxy/here/pull/17","https://github.com/vivaxy/here/commit/298dbab41344dfb7f95f66b1fa7b5cfb436bd4a2","https://hackerone.com/reports/296254","https://hackerone.com/reports/569966","https://www.npmjs.com/advisories/554"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-g8m7-qhv7-9h5x","url":"https://osv.dev/vulnerability/GHSA-g8m7-qhv7-9h5x"}],"summary":"Path Traversal in serve-here.js"}