{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.3.1.SNAPSHOT"}],"component":"cn.dreampie:resty","cve_ids":["CVE-2025-13435"],"ecosystem":"Maven","epss":0.00799,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-cv3m-hxpc-4hvm","id":"tcs_01M5N8T9ZBVTY4YR9ZZ87Q6GAM","modified_at":"2025-11-20T18:42:51.639787Z","published_at":"2025-11-20T15:30:23Z","references":["https://osv.dev/vulnerability/GHSA-cv3m-hxpc-4hvm","https://nvd.nist.gov/vuln/detail/CVE-2025-13435","https://github.com/Dreampie/resty","https://github.com/Xzzz111/exps/blob/main/archives/Resty-PathTraversal-01/cve_application.md","https://vuldb.com/?ctiid.332979","https://vuldb.com/?id.332979","https://vuldb.com/?submit.687603"],"severity":{"label":"medium","score":5.6},"sources":[{"source":"osv","source_id":"GHSA-cv3m-hxpc-4hvm","url":"https://osv.dev/vulnerability/GHSA-cv3m-hxpc-4hvm"}],"summary":"Resty has a Path Traversal vulnerability"}