{"action":"Upgrade net.devtech:arrp to 0.8.2 or later.","affected":[{"fixed":"0.8.2","introduced":"0"}],"component":"net.devtech:arrp","cve_ids":["CVE-2024-24042"],"ecosystem":"Maven","epss":0.01359,"exploited":false,"fixed_versions":["0.8.2"],"ghsa_id":"GHSA-cg24-jjr5-rxmf","id":"tcs_01M5N8S9TJM3NBM2SX9QGJT5WV","modified_at":"2024-03-19T20:26:47.793572Z","published_at":"2024-03-19T09:30:32Z","references":["https://osv.dev/vulnerability/GHSA-cg24-jjr5-rxmf","https://nvd.nist.gov/vuln/detail/CVE-2024-24042","https://github.com/Devan-Kerman/ARRP/commit/7ea80db462c8bf66a0565e84fa49c1f2ecb9287b","https://gist.github.com/apple502j/193358682885fe1a6708309ce934e4ed","https://github.com/Devan-Kerman/ARRP"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-cg24-jjr5-rxmf","url":"https://osv.dev/vulnerability/GHSA-cg24-jjr5-rxmf"}],"summary":"Path traversal in flaskcode Devan-Kerman ARRP"}