{"action":"Upgrade org.noear:solon-web-staticfiles to 3.0.9 or later.","affected":[{"fixed":"3.0.9","introduced":"0"}],"component":"org.noear:solon-web-staticfiles","cve_ids":["CVE-2025-1584"],"ecosystem":"Maven","epss":0.00569,"exploited":false,"fixed_versions":["3.0.9"],"ghsa_id":"GHSA-x8q6-cchr-p7m6","id":"tcs_01M5N9HZV3MJHJNJ574SNRD1M1","modified_at":"2025-02-24T18:57:07.611947Z","published_at":"2025-02-23T15:30:58Z","references":["https://osv.dev/vulnerability/GHSA-x8q6-cchr-p7m6","https://nvd.nist.gov/vuln/detail/CVE-2025-1584","https://github.com/opensolon/solon/issues/332","https://github.com/opensolon/solon/issues/332#issue-2866229828","https://github.com/opensolon/solon/issues/332#issuecomment-2674330700","https://github.com/opensolon/solon/commit/f46e47fd1f8455b9467d7ead3cdb0509115b2ef1","https://github.com/opensolon/solon","https://vuldb.com/?ctiid.296560","https://vuldb.com/?id.296560","https://vuldb.com/?submit.504454"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-x8q6-cchr-p7m6","url":"https://osv.dev/vulnerability/GHSA-x8q6-cchr-p7m6"}],"summary":"Solon Path Traversal"}