{"action":"Upgrade decompress to 4.2.1 or later.","affected":[{"fixed":"4.2.1","introduced":"0"}],"component":"decompress","cve_ids":["CVE-2020-12265"],"ecosystem":"npm","epss":0.02116,"exploited":false,"fixed_versions":["4.2.1"],"ghsa_id":"GHSA-qgfr-5hqp-vrw9","id":"tcs_01M5KG630P6YWFVC96MKG76CZG","modified_at":"2023-11-08T04:02:09.645570Z","published_at":"2020-09-03T21:16:27Z","references":["https://osv.dev/vulnerability/GHSA-qgfr-5hqp-vrw9","https://nvd.nist.gov/vuln/detail/CVE-2020-12265","https://github.com/kevva/decompress/issues/71","https://github.com/kevva/decompress/pull/73","https://github.com/kevva/decompress/commit/967146e70f48be32ed1a69daa3941d681944d513","https://github.com/kevva/decompress"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-qgfr-5hqp-vrw9","url":"https://osv.dev/vulnerability/GHSA-qgfr-5hqp-vrw9"}],"summary":"Path Traversal in decompress"}