{"action":"Upgrade Tgstation.Server.Host to 6.8.0 or later.","affected":[{"fixed":"6.8.0","introduced":"4.0.0"}],"component":"Tgstation.Server.Host","cve_ids":["CVE-2024-41799"],"ecosystem":"NuGet","epss":0.0121,"exploited":false,"fixed_versions":["6.8.0"],"ghsa_id":"GHSA-c3h4-9gc2-f7h4","id":"tcs_01M5N8HN73A2V54RJGGEMGSBFT","modified_at":"2026-09-10T03:50:16.586477658Z","published_at":"2024-07-29T16:44:15Z","references":["https://osv.dev/vulnerability/GHSA-c3h4-9gc2-f7h4","https://github.com/tgstation/tgstation-server/security/advisories/GHSA-c3h4-9gc2-f7h4","https://nvd.nist.gov/vuln/detail/CVE-2024-41799","https://github.com/tgstation/tgstation-server/pull/1835","https://github.com/tgstation/tgstation-server/commit/374852fe5ae306415eb5aafb2d16b06897d7afe4","https://github.com/tgstation/tgstation-server"],"severity":{"label":"high","score":8.4},"sources":[{"source":"osv","source_id":"GHSA-c3h4-9gc2-f7h4#NuGet/Tgstation.Server.Host","url":"https://osv.dev/vulnerability/GHSA-c3h4-9gc2-f7h4"}],"summary":"tgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned users"}