{"action":"Upgrade next to 4.2.3 or later.","affected":[{"fixed":"4.2.3","introduced":"1.0.0"}],"component":"next","cve_ids":["CVE-2018-6184"],"ecosystem":"npm","epss":0.0906,"exploited":false,"fixed_versions":["4.2.3"],"ghsa_id":"GHSA-m34x-wgrh-g897","id":"tcs_01M5KFZEADNS28FP5CWMEBB88W","modified_at":"2023-11-08T04:00:21.025418Z","published_at":"2018-01-24T19:38:52Z","references":["https://osv.dev/vulnerability/GHSA-m34x-wgrh-g897","https://nvd.nist.gov/vuln/detail/CVE-2018-6184","https://github.com/advisories/GHSA-m34x-wgrh-g897","https://github.com/vercel/next.js/releases/tag/4.2.3","https://github.com/zeit/next.js"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-m34x-wgrh-g897","url":"https://osv.dev/vulnerability/GHSA-m34x-wgrh-g897"}],"summary":"Directory traversal vulnerability in Next.js"}