{"action":"Upgrade nodebb to 2.8.7 or later.","affected":[{"fixed":"2.8.7","introduced":"2.5.0"}],"component":"nodebb","cve_ids":["CVE-2023-26045"],"ecosystem":"npm","epss":0.01029,"exploited":false,"fixed_versions":["2.8.7"],"ghsa_id":"GHSA-vh2g-6c4x-5hmp","id":"tcs_01M5KGBX8KJNFHCYVFAMXEGHVZ","modified_at":"2026-09-10T03:49:57.256523361Z","published_at":"2023-07-25T13:54:13Z","references":["https://osv.dev/vulnerability/GHSA-vh2g-6c4x-5hmp","https://github.com/NodeBB/NodeBB/security/advisories/GHSA-vh2g-6c4x-5hmp","https://nvd.nist.gov/vuln/detail/CVE-2023-26045","https://github.com/NodeBB/NodeBB/commit/ec58700f6dff8e5b4af1544f6205ec362b593092","https://github.com/NodeBB/NodeBB","https://security.netapp.com/advisory/ntap-20230831-0004"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-vh2g-6c4x-5hmp","url":"https://osv.dev/vulnerability/GHSA-vh2g-6c4x-5hmp"}],"summary":"Path traversal and code execution via prototype vulnerability"}