{"action":"Upgrade com.sparkjava:spark-core to 2.5.2 or later.","affected":[{"fixed":"2.5.2","introduced":"0"}],"component":"com.sparkjava:spark-core","cve_ids":["CVE-2016-9177"],"ecosystem":"Maven","epss":0.05074,"exploited":false,"fixed_versions":["2.5.2"],"ghsa_id":"GHSA-89gc-6cw6-4vch","id":"tcs_01M5N8MCEXEK15V9RH1PYGX9NY","modified_at":"2023-11-08T03:58:37.934322Z","published_at":"2018-10-04T19:53:35Z","references":["https://osv.dev/vulnerability/GHSA-89gc-6cw6-4vch","https://nvd.nist.gov/vuln/detail/CVE-2016-9177","https://github.com/perwendel/spark/issues/700","https://access.redhat.com/errata/RHSA-2017:0868","https://github.com/advisories/GHSA-89gc-6cw6-4vch","https://github.com/perwendel/spark","http://seclists.org/fulldisclosure/2016/Nov/13","http://www.securityfocus.com/bid/94218"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-89gc-6cw6-4vch","url":"https://osv.dev/vulnerability/GHSA-89gc-6cw6-4vch"}],"summary":"Spark allows remote attackers to read arbitrary files via a .. (dot dot) in the URI"}