{"action":"Upgrade goyave.dev/goyave/v5 to 5.5.0 or later.","affected":[{"fixed":"5.5.0","introduced":"5.0.0"}],"component":"goyave.dev/goyave/v5","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["5.5.0"],"id":"tcs_01M5KG64DDPN0V3V1RXBDY7GKH","modified_at":"2024-12-13T20:59:35Z","published_at":"2024-12-13T20:59:35Z","references":["https://osv.dev/vulnerability/GO-2024-3293","https://github.com/go-goyave/goyave/commit/5836bff3efaa8a37fbd58d077b93f03e93e05edd","https://github.com/golang/vulndb/issues/3293"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-3293","url":"https://osv.dev/vulnerability/GO-2024-3293"}],"summary":"Full access to the host's OS file system using osfs.FS with Router.Static in goyave.dev/goyave/v5"}