{"action":"Upgrade react-native-document-picker to 8.2.2 or later.","affected":[{"fixed":"9.1.1","introduced":"9.0.0"},{"fixed":"8.2.2","introduced":"0"}],"component":"react-native-document-picker","cve_ids":["CVE-2024-25466"],"ecosystem":"npm","epss":0.0054,"exploited":false,"fixed_versions":["9.1.1","8.2.2"],"ghsa_id":"GHSA-pmgm-h3cc-m4hj","id":"tcs_01M5KG3ZQ0CFM87BZNHPAMP191","modified_at":"2025-03-27T18:38:48Z","published_at":"2024-02-16T09:30:26Z","references":["https://osv.dev/vulnerability/GHSA-pmgm-h3cc-m4hj","https://nvd.nist.gov/vuln/detail/CVE-2024-25466","https://github.com/rnmods/react-native-document-picker/pull/698","https://github.com/rnmods/react-native-document-picker/commit/1ae7cb217d23a551bff86ad10c7ae6f5e074490f","https://github.com/rnmods/react-native-document-picker/commit/ad0b5e58252eba56a5a3b22311a66ffa5e65cffe","https://github.com/FixedOctocat/CVE-2024-25466/tree/main","https://github.com/rnmods/react-native-document-picker","https://github.com/rnmods/react-native-document-picker/blob/0be5a70c3b456e35c2454aaf4dc8c2d40eb2ab47/android/src/main/java/com/reactnativedocumentpicker/RNDocumentPickerModule.java","https://github.com/rnmods/react-native-document-picker/releases/tag/v8.2.2"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-pmgm-h3cc-m4hj","url":"https://osv.dev/vulnerability/GHSA-pmgm-h3cc-m4hj"}],"summary":"React Native Document Picker Directory Traversal vulnerability"}