{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.0.0"}],"component":"serveryaozeyan","cve_ids":["CVE-2017-16096"],"ecosystem":"npm","epss":0.01974,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-gqfv-g9f6-3v3m","id":"tcs_01M5KFSATA12XBBZTPJ7ZAFC4D","modified_at":"2023-11-08T03:59:04.609086Z","published_at":"2020-09-01T16:50:23Z","references":["https://osv.dev/vulnerability/GHSA-gqfv-g9f6-3v3m","https://nvd.nist.gov/vuln/detail/CVE-2017-16096","https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serveryaozeyan","https://www.npmjs.com/advisories/355"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-gqfv-g9f6-3v3m","url":"https://osv.dev/vulnerability/GHSA-gqfv-g9f6-3v3m"}],"summary":"Directory Traversal in serveryaozeyan"}