{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.5.0"}],"component":"convert-svg-core","cve_ids":["CVE-2021-23631"],"ecosystem":"npm","epss":0.01978,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-jv7g-9g6q-cxvw","id":"tcs_01M5KFYYRX0M2MSZXNJ3NKVP2Q","modified_at":"2023-11-08T04:05:12.134865Z","published_at":"2022-01-27T14:04:28Z","references":["https://osv.dev/vulnerability/GHSA-jv7g-9g6q-cxvw","https://nvd.nist.gov/vuln/detail/CVE-2021-23631","https://gist.github.com/legndery/a248350bb25b8502a03c2f407cedeb14","https://github.com/neocotic/convert-svg","https://snyk.io/vuln/SNYK-JS-CONVERTSVGCORE-1582785","https://snyk.io/vuln/SNYK-JS-CONVERTSVGTOJPEG-2348245","https://snyk.io/vuln/SNYK-JS-CONVERTSVGTOPNG-2348244"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-jv7g-9g6q-cxvw","url":"https://osv.dev/vulnerability/GHSA-jv7g-9g6q-cxvw"}],"summary":"Path Traversal in convert-svg packages"}