{"action":"Upgrade electron to 42.11.3 or later.","affected":[{"fixed":"45.0.0-alpha.5","introduced":"45.0.0-alpha.1"},{"fixed":"44.3.0","introduced":"44.0.0-alpha.1"},{"fixed":"43.7.0","introduced":"43.0.0-alpha.1"},{"fixed":"42.11.3","introduced":"0"}],"component":"electron","cve_ids":["CVE-2026-113800"],"ecosystem":"npm","exploited":false,"fixed_versions":["45.0.0-alpha.5","44.3.0","43.7.0","42.11.3"],"ghsa_id":"GHSA-fw47-9c62-h3vw","id":"tcs_01M5JKT8SFRM3H12B5JV65C6NB","modified_at":"2026-10-21T17:35:19.879130922Z","published_at":"2026-10-21T17:21:51Z","references":["https://osv.dev/vulnerability/GHSA-fw47-9c62-h3vw","https://github.com/electron/electron/security/advisories/GHSA-fw47-9c62-h3vw","https://github.com/electron/electron/pull/53656","https://github.com/electron/electron/pull/53679","https://github.com/electron/electron/pull/53688","https://github.com/electron/electron/pull/53689","https://github.com/electron/electron/pull/53736","https://github.com/electron/electron/commit/22de0a3a06cfd3174fc6c59c3810ab5e1c91bf1a","https://github.com/electron/electron/commit/36042b2e1b1c60c67b05ba0e95d1a34f608b9742","https://github.com/electron/electron/commit/56cc43eb677d46b86b0d3f49b5fba71404ab1ff0","https://github.com/electron/electron/commit/922073f8601479e93071f56f0745041291b206fd","https://github.com/electron/electron/commit/c965cee73284c4b230a81d51a7db6115e55da8c0","https://github.com/electron/electron","https://github.com/electron/electron/releases/tag/v42.11.3","https://github.com/electron/electron/releases/tag/v43.7.0","https://github.com/electron/electron/releases/tag/v44.3.0","https://github.com/electron/electron/releases/tag/v45.0.0-alpha.5"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-fw47-9c62-h3vw","url":"https://osv.dev/vulnerability/GHSA-fw47-9c62-h3vw"}],"summary":"Electron: HID and USB permission checks can be attributed to the wrong origin"}