{"action":"Upgrade m-server to 1.4.2 or later.","affected":[{"fixed":"1.4.2","introduced":"0"}],"component":"m-server","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.4.2"],"ghsa_id":"GHSA-vc6r-4x6g-mmqc","id":"tcs_01M5KGBG5SEYVMX7KAN6DCGNCR","modified_at":"2020-08-31T18:33:45Z","published_at":"2019-06-11T16:16:23Z","references":["https://osv.dev/vulnerability/GHSA-vc6r-4x6g-mmqc","https://github.com/nunnly/m-server/commit/01f13f040d1961ca3146dce7e2db990156e65e9a","https://hackerone.com/reports/319795","https://github.com/nodejs/security-wg/blob/master/vuln/npm/468.json","https://www.npmjs.com/advisories/731"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-vc6r-4x6g-mmqc","url":"https://osv.dev/vulnerability/GHSA-vc6r-4x6g-mmqc"}],"summary":"Path Traversal in m-server"}