{"action":"Upgrade org.apache.tapestry:tapestry-core to 5.6.0 or later.","affected":[{"fixed":"5.6.0","introduced":"5.4.0"}],"component":"org.apache.tapestry:tapestry-core","cve_ids":["CVE-2020-13953"],"ecosystem":"Maven","epss":0.02651,"exploited":false,"fixed_versions":["5.6.0"],"ghsa_id":"GHSA-w9mp-p2wp-2xf7","id":"tcs_01M5N9G1AC921AR3J7EE4D600E","modified_at":"2023-11-08T04:02:24.140577Z","published_at":"2022-02-10T20:35:42Z","references":["https://osv.dev/vulnerability/GHSA-w9mp-p2wp-2xf7","https://nvd.nist.gov/vuln/detail/CVE-2020-13953","https://lists.apache.org/thread.html/r37dab61fc7f7088d4311e7f995ef4117d58d86a675f0256caa6991eb@%3Cusers.tapestry.apache.org%3E","https://lists.apache.org/thread.html/r50eb12e8a12074a9b7ed63cbab91d180d19cc23dc1da3ed5b6e1280f%40%3Cusers.tapestry.apache.org%3E"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-w9mp-p2wp-2xf7","url":"https://osv.dev/vulnerability/GHSA-w9mp-p2wp-2xf7"}],"summary":"Improper file downloads in Apache Tapestry"}