{"action":"Upgrade hostr to 2.3.6 or later.","affected":[{"fixed":"2.3.6","introduced":"0"}],"component":"hostr","cve_ids":["CVE-2017-16029"],"ecosystem":"npm","epss":0.01797,"exploited":false,"fixed_versions":["2.3.6"],"ghsa_id":"GHSA-xqqr-p362-6rmc","id":"tcs_01M5KGJP4N8SSG37VFFKEYBCB1","modified_at":"2023-11-08T03:59:00.558114Z","published_at":"2018-11-09T17:44:20Z","references":["https://osv.dev/vulnerability/GHSA-xqqr-p362-6rmc","https://nvd.nist.gov/vuln/detail/CVE-2017-16029","https://github.com/henrytseng/hostr/issues/8","https://github.com/henrytseng/hostr/issues/8)","https://github.com/advisories/GHSA-xqqr-p362-6rmc","https://www.npmjs.com/advisories/303"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xqqr-p362-6rmc","url":"https://osv.dev/vulnerability/GHSA-xqqr-p362-6rmc"}],"summary":"Directory Traversal in hostr"}