{"action":"Upgrade @jmondi/url-to-png to 2.1.2 or later.","affected":[{"fixed":"2.1.2","introduced":"0"}],"component":"@jmondi/url-to-png","cve_ids":["CVE-2024-39918"],"ecosystem":"npm","epss":0.00528,"exploited":false,"fixed_versions":["2.1.2"],"ghsa_id":"GHSA-vvmv-wrvp-9gjr","id":"tcs_01M5KGD1YW63RY4B132HDJ2DAZ","modified_at":"2026-09-10T03:50:16.990096613Z","published_at":"2024-07-15T17:46:57Z","references":["https://osv.dev/vulnerability/GHSA-vvmv-wrvp-9gjr","https://github.com/jasonraimondi/url-to-png/security/advisories/GHSA-vvmv-wrvp-9gjr","https://nvd.nist.gov/vuln/detail/CVE-2024-39918","https://github.com/jasonraimondi/url-to-png/commit/e4eaeca6493b21cd515b582fd6c0af09ede54507","https://github.com/jasonraimondi/url-to-png","https://github.com/jasonraimondi/url-to-png/blob/e43098e0af3a380ebc044e7f303a83933b94b434/src/middlewares/extract_query_params.ts#L75","https://github.com/jasonraimondi/url-to-png/releases/tag/v2.1.2"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-vvmv-wrvp-9gjr","url":"https://osv.dev/vulnerability/GHSA-vvmv-wrvp-9gjr"}],"summary":"@jmondi/url-to-png contains a Path Traversal vulnerability"}