{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.0.1"}],"component":"org.hswebframework.web:hsweb-system-file","cve_ids":["CVE-2026-11470"],"ecosystem":"Maven","epss":0.00301,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-vjmr-f5fc-vr2w","id":"tcs_01M5N9E73RC56YAGN7E1V5V39Z","modified_at":"2026-07-28T21:11:49.489655Z","published_at":"2026-06-08T03:47:23Z","references":["https://osv.dev/vulnerability/GHSA-vjmr-f5fc-vr2w","https://nvd.nist.gov/vuln/detail/CVE-2026-11470","https://github.com/hs-web/hsweb-framework/issues/344","https://github.com/hs-web/hsweb-framework/issues/344#issuecomment-3798035002","https://github.com/hs-web/hsweb-framework/commit/8009845b577d8a2c4bbf4fdd8e8913799a714be6","https://github.com/hs-web/hsweb-framework","https://vuldb.com/cve/CVE-2026-11470","https://vuldb.com/submit/833856","https://vuldb.com/vuln/369090","https://vuldb.com/vuln/369090/cti"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-vjmr-f5fc-vr2w","url":"https://osv.dev/vulnerability/GHSA-vjmr-f5fc-vr2w"}],"summary":"hsweb-framework has a Path Traversal issue"}