{"action":"Upgrade @vivaxy/here to 3.2.2 or later.","affected":[{"fixed":"3.2.2","introduced":"0"}],"component":"@vivaxy/here","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["3.2.2"],"ghsa_id":"GHSA-m4vv-p6fq-jhqp","id":"tcs_01M5KFZJJ667R918AQ3YSG1YWQ","modified_at":"2021-09-23T21:48:53Z","published_at":"2020-09-01T19:04:07Z","references":["https://osv.dev/vulnerability/GHSA-m4vv-p6fq-jhqp","https://github.com/vivaxy/here/commit/298dbab41344dfb7f95f66b1fa7b5cfb436bd4a2","https://hackerone.com/reports/296254","https://github.com/vivaxy/here","https://www.npmjs.com/advisories/557"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-m4vv-p6fq-jhqp","url":"https://osv.dev/vulnerability/GHSA-m4vv-p6fq-jhqp"}],"summary":"Directory Traversal in @vivaxy/here"}