{"action":"Upgrade ftp-srv to 4.4.0 or later.","affected":[{"fixed":"4.4.0","introduced":"0"}],"component":"ftp-srv","cve_ids":["CVE-2020-26299"],"ecosystem":"npm","epss":0.01886,"exploited":false,"fixed_versions":["4.4.0"],"ghsa_id":"GHSA-pmw4-jgxx-pcq9","id":"tcs_01M5KG428V25DZBBYG49EN2TNZ","modified_at":"2026-07-08T06:00:48.447764796Z","published_at":"2021-02-10T18:11:34Z","references":["https://osv.dev/vulnerability/GHSA-pmw4-jgxx-pcq9","https://github.com/autovance/ftp-srv/security/advisories/GHSA-pmw4-jgxx-pcq9","https://nvd.nist.gov/vuln/detail/CVE-2020-26299","https://github.com/autovance/ftp-srv/issues/167","https://github.com/autovance/ftp-srv/issues/225","https://github.com/autovance/ftp-srv/pull/224","https://github.com/autovance/ftp-srv/commit/457b859450a37cba10ff3c431eb4aa67771122e3","https://www.npmjs.com/package/ftp-srv"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-pmw4-jgxx-pcq9","url":"https://osv.dev/vulnerability/GHSA-pmw4-jgxx-pcq9"}],"summary":"File System Bounds Escape"}