{"action":"Upgrade jquery-file-upload to 4.0.5 or later.","affected":[{"fixed":"4.0.5","introduced":"0"}],"component":"jquery-file-upload","cve_ids":["CVE-2018-9207"],"ecosystem":"npm","epss":0.03451,"exploited":false,"fixed_versions":["4.0.5"],"ghsa_id":"GHSA-mxr5-p36v-479m","id":"tcs_01M5KG238XNCKCJW9XYPV3HVRZ","modified_at":"2023-11-08T04:00:30.309281Z","published_at":"2018-12-19T19:24:03Z","references":["https://osv.dev/vulnerability/GHSA-mxr5-p36v-479m","https://nvd.nist.gov/vuln/detail/CVE-2018-9207","https://github.com/advisories/GHSA-mxr5-p36v-479m","http://www.vapidlabs.com/advisory.php?v=206"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-mxr5-p36v-479m","url":"https://osv.dev/vulnerability/GHSA-mxr5-p36v-479m"}],"summary":"Unrestricted Upload of File with Dangerous Type in jquery-file-upload"}