{"action":"Upgrade com.vaadin:vaadin-bom to 14.4.3 (14.x) or 18.0.0 (18.x) or later.","affected":[{"fixed":"14.4.3","introduced":"14.0.0"},{"fixed":"18.0.0","introduced":"15.0.0"}],"component":"com.vaadin:vaadin-bom","cve_ids":[],"ecosystem":"Maven","exploited":false,"fixed_versions":["14.4.3","18.0.0"],"ghsa_id":"GHSA-82mf-mmh7-hxp5","id":"tcs_01M5N8KJMKKJGEJW7S68CWMAMP","modified_at":"2024-12-02T05:43:01.074822Z","published_at":"2021-04-19T14:48:15Z","references":["https://osv.dev/vulnerability/GHSA-82mf-mmh7-hxp5","https://github.com/vaadin/platform/security/advisories/GHSA-82mf-mmh7-hxp5","https://github.com/vaadin/platform","https://vaadin.com/security/cve-2020-36321"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-82mf-mmh7-hxp5","url":"https://osv.dev/vulnerability/GHSA-82mf-mmh7-hxp5"}],"summary":"Directory traversal in development mode handler in Vaadin 14 and 15-17"}