{"action":"Upgrade simplehttpserver to 0.2.1 or later.","affected":[{"fixed":"0.2.1","introduced":"0"}],"component":"simplehttpserver","cve_ids":["CVE-2018-3787"],"ecosystem":"npm","epss":0.02038,"exploited":false,"fixed_versions":["0.2.1"],"ghsa_id":"GHSA-gpvj-q7fp-jcch","id":"tcs_01M5KFS86ZM6ENZHAZY38NA7N4","modified_at":"2023-11-08T04:00:20.290124Z","published_at":"2018-09-06T03:22:59Z","references":["https://osv.dev/vulnerability/GHSA-gpvj-q7fp-jcch","https://nvd.nist.gov/vuln/detail/CVE-2018-3787","https://hackerone.com/reports/357109","https://github.com/advisories/GHSA-gpvj-q7fp-jcch"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-gpvj-q7fp-jcch","url":"https://osv.dev/vulnerability/GHSA-gpvj-q7fp-jcch"}],"summary":"simplehttpserver allows directory traversal and file listing"}