{"action":"Upgrade vite to 2.9.13 or later.","affected":[{"fixed":"2.9.13","introduced":"0"},{"fixed":"3.0.0-beta.4","introduced":"3.0.0-alpha.0"}],"component":"vite","cve_ids":["CVE-2022-35204"],"ecosystem":"npm","epss":0.01294,"exploited":false,"fixed_versions":["2.9.13","3.0.0-beta.4"],"ghsa_id":"GHSA-mv48-hcvh-8jj8","id":"tcs_01M5KG1Q6QSZX9FQKCBG623QB3","modified_at":"2024-09-23T19:18:33Z","published_at":"2022-08-19T00:00:20Z","references":["https://osv.dev/vulnerability/GHSA-mv48-hcvh-8jj8","https://nvd.nist.gov/vuln/detail/CVE-2022-35204","https://github.com/vitejs/vite/issues/8498","https://github.com/vitejs/vite/commit/6851009e6725b17608113a5a63474280075cae1c","https://github.com/vitejs/vite/commit/e109d64331d9fa57753832762c3573c3532a6947","https://github.com/vitejs/vite","https://github.com/vitejs/vite/releases/tag/v2.9.13","https://github.com/vitejs/vite/releases/tag/v3.0.0-beta.4"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-mv48-hcvh-8jj8","url":"https://osv.dev/vulnerability/GHSA-mv48-hcvh-8jj8"}],"summary":"Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service"}