{"action":"Upgrade vvvebJs to 1.7.5 or later.","affected":[{"fixed":"1.7.5","introduced":"0"}],"component":"vvvebJs","cve_ids":["CVE-2024-29272"],"ecosystem":"npm","epss":0.09366,"exploited":false,"fixed_versions":["1.7.5"],"ghsa_id":"GHSA-pmm3-68q9-57jg","id":"tcs_01M5KG40JPNWX24MD6BV2SG207","modified_at":"2024-08-02T13:42:03.064727Z","published_at":"2024-03-22T06:30:24Z","references":["https://osv.dev/vulnerability/GHSA-pmm3-68q9-57jg","https://nvd.nist.gov/vuln/detail/CVE-2024-29272","https://github.com/givanz/VvvebJs/issues/343","https://github.com/givanz/VvvebJs/commit/c6422cfd4d835c2fa6d512645e30015f24538ef0","https://github.com/givanz/VvvebJs"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-pmm3-68q9-57jg","url":"https://osv.dev/vulnerability/GHSA-pmm3-68q9-57jg"}],"summary":"VvvebJs Arbitrary File Upload vulnerability"}