{"action":"Upgrade ghost to 5.42.1 or later.","affected":[{"fixed":"5.42.1","introduced":"0"}],"component":"ghost","cve_ids":["CVE-2023-32235"],"ecosystem":"npm","epss":0.39078,"exploited":false,"fixed_versions":["5.42.1"],"ghsa_id":"GHSA-wf7x-fh6w-34r6","id":"tcs_01M5KGEVXXFX9KGDH4TBCCTW9F","modified_at":"2023-12-06T01:03:01.557084Z","published_at":"2023-05-05T06:30:32Z","references":["https://osv.dev/vulnerability/GHSA-wf7x-fh6w-34r6","https://nvd.nist.gov/vuln/detail/CVE-2023-32235","https://github.com/TryGhost/Ghost/commit/378dd913aa8d0fd0da29b0ffced8884579598b0f","https://github.com/TryGhost/Ghost","https://github.com/TryGhost/Ghost/compare/v5.42.0...v5.42.1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-wf7x-fh6w-34r6","url":"https://osv.dev/vulnerability/GHSA-wf7x-fh6w-34r6"}],"summary":"Path Traversal in Ghost"}