{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.1.1"}],"component":"easy-static-server","cve_ids":["CVE-2022-25931"],"ecosystem":"npm","epss":0.01413,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-wcwm-c3mr-pxcr","id":"tcs_01M5KGESQVKY66HSCZMJA5FBGR","modified_at":"2023-11-08T04:08:52.507754Z","published_at":"2022-12-20T06:30:36Z","references":["https://osv.dev/vulnerability/GHSA-wcwm-c3mr-pxcr","https://nvd.nist.gov/vuln/detail/CVE-2022-25931","https://gist.github.com/lirantal/fdfbe26561788c8194a54bf6d31772c9","https://github.com/cunjieliu/easyServer","https://github.com/cunjieliu/easyServer/blob/master/index.js#23L27","https://security.snyk.io/vuln/SNYK-JS-EASYSTATICSERVER-3153539"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-wcwm-c3mr-pxcr","url":"https://osv.dev/vulnerability/GHSA-wcwm-c3mr-pxcr"}],"summary":"easy-static-server vulnerable to Directory Traversal"}