{"action":"Upgrade erxes to 1.6.2 or later.","affected":[{"fixed":"1.6.2","introduced":"0"}],"component":"erxes","cve_ids":["CVE-2024-57186"],"ecosystem":"npm","epss":0.00417,"exploited":false,"fixed_versions":["1.6.2"],"ghsa_id":"GHSA-rq9r-qvwg-829q","id":"tcs_01M5KG9N58Y5ZXE3VR0F3CGJ4V","modified_at":"2025-06-10T21:12:11.055832Z","published_at":"2025-06-10T18:32:27Z","references":["https://osv.dev/vulnerability/GHSA-rq9r-qvwg-829q","https://nvd.nist.gov/vuln/detail/CVE-2024-57186","https://github.com/erxes/erxes/commit/d626070a0fcd435ae29e689aca051ccfb440c2f3","https://github.com/erxes/erxes","https://www.sonarsource.com/blog/micro-services-major-headaches-detecting-vulnerabilities-in-erxes-microservices"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-rq9r-qvwg-829q","url":"https://osv.dev/vulnerability/GHSA-rq9r-qvwg-829q"},{"source":"nvd","source_id":"CVE-2024-57186","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-57186"}],"summary":"Erxes Path Traversal vulnerability"}