{"action":"Upgrade org.owasp:dependency-check-maven to 3.2.0 or later.","affected":[{"fixed":"3.2.0","introduced":"0"}],"component":"org.owasp:dependency-check-maven","cve_ids":["CVE-2018-12036"],"ecosystem":"Maven","epss":0.01683,"exploited":false,"fixed_versions":["3.2.0"],"ghsa_id":"GHSA-hcwx-7q5v-vc67","id":"tcs_01M5N90BKVABJRNN5KH7RKD0EH","modified_at":"2023-11-08T03:59:48.987187Z","published_at":"2022-05-14T03:12:09Z","references":["https://osv.dev/vulnerability/GHSA-hcwx-7q5v-vc67","https://nvd.nist.gov/vuln/detail/CVE-2018-12036","https://github.com/jeremylong/DependencyCheck","https://github.com/jeremylong/DependencyCheck/blob/master/RELEASE_NOTES.md#version-320-2018-05-21","https://github.com/snyk/zip-slip-vulnerability"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-hcwx-7q5v-vc67","url":"https://osv.dev/vulnerability/GHSA-hcwx-7q5v-vc67"}],"summary":"Path Traversal in OWASP Dependency-Check"}