{"action":"Upgrade node to 20.19.4 (20.x), 22.17.1 (22.x) or 24.4.1 (24.x) or later.","affected":[{"fixed":"20.19.4","introduced":"20.0.0"},{"fixed":"22.17.1","introduced":"22.0.0"},{"fixed":"24.4.1","introduced":"24.0.0"}],"component":"node","cve_ids":["CVE-2025-27210"],"ecosystem":"node","epss":0.14338,"exploited":false,"fixed_versions":["20.19.4","22.17.1","24.4.1"],"id":"tcs_01M5MHNHXH4ZVTW5R7DZGB8TGT","modified_at":"2025-07-15T00:00:00Z","published_at":"2025-07-15T00:00:00Z","references":["https://nodejs.org/en/blog/vulnerability/july-2025-security-releases"],"severity":{"label":"high","score":7.5},"sources":[{"source":"node-runtime","source_id":"CVE-2025-27210","url":"https://nodejs.org/en/blog/vulnerability/july-2025-security-releases"},{"source":"nvd","source_id":"CVE-2025-27210","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27210"}],"summary":"Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize()"}