{"action":"Upgrade snyk-broker to 4.73.0 or later.","affected":[{"fixed":"4.73.0","introduced":"0"}],"component":"snyk-broker","cve_ids":["CVE-2020-7649"],"ecosystem":"npm","epss":0.01628,"exploited":false,"fixed_versions":["4.73.0"],"ghsa_id":"GHSA-gq75-5gc3-rfwg","id":"tcs_01M5KFS9TEHVCQ11YCHW6CR9SC","modified_at":"2023-11-08T04:04:02.693030Z","published_at":"2022-07-26T00:01:05Z","references":["https://osv.dev/vulnerability/GHSA-gq75-5gc3-rfwg","https://nvd.nist.gov/vuln/detail/CVE-2020-7649","https://github.com/snyk/broker/commit/90e0bac07a800b7c4c6646097c9c89d6b878b429","https://github.com/snyk/broker","https://github.com/snyk/broker/releases/tag/v4.73.0","https://security.snyk.io/vuln/SNYK-JS-SNYKBROKER-570608","https://updates.snyk.io/snyk-broker-security-fixes-152338"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-gq75-5gc3-rfwg","url":"https://osv.dev/vulnerability/GHSA-gq75-5gc3-rfwg"}],"summary":"snyk-broker Path Traversal before v4.73.0"}