{"action":"Upgrade hashbrown-cms to 1.3.2 or later.","affected":[{"fixed":"1.3.2","introduced":"0"}],"component":"hashbrown-cms","cve_ids":["CVE-2020-5840"],"ecosystem":"npm","epss":0.01494,"exploited":false,"fixed_versions":["1.3.2"],"ghsa_id":"GHSA-q7hx-mrv5-6mrp","id":"tcs_01M5KG5JTPZ0D7TDFRWDKTTC70","modified_at":"2023-11-08T04:03:56.566166Z","published_at":"2022-05-24T17:05:42Z","references":["https://osv.dev/vulnerability/GHSA-q7hx-mrv5-6mrp","https://nvd.nist.gov/vuln/detail/CVE-2020-5840","https://github.com/HashBrownCMS/hashbrown-cms/commit/6b37b73944447bb29c6aaeb086b04196d80c692a","https://github.com/HashBrownCMS/hashbrown-cms","https://github.com/HashBrownCMS/hashbrown-cms/compare/v1.3.1...v1.3.2","https://github.com/HashBrownCMS/hashbrown-cms/releases/tag/v1.3.2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-q7hx-mrv5-6mrp","url":"https://osv.dev/vulnerability/GHSA-q7hx-mrv5-6mrp"}],"summary":"HashBrown CMS Directory Traversal"}