{"action":"Upgrade electron to 42.11.1 or later.","affected":[{"fixed":"45.0.0-alpha.4","introduced":"45.0.0-alpha.1"},{"fixed":"44.1.1","introduced":"44.0.0-alpha.1"},{"fixed":"43.5.1","introduced":"43.0.0-alpha.1"},{"fixed":"42.11.1","introduced":"0"}],"component":"electron","cve_ids":["CVE-2026-113797"],"ecosystem":"npm","exploited":false,"fixed_versions":["45.0.0-alpha.4","44.1.1","43.5.1","42.11.1"],"ghsa_id":"GHSA-98mx-cjp9-gchm","id":"tcs_01M5JMDB8WWQVKRK0SSTSZNZYY","modified_at":"2026-10-22T17:00:04.179486447Z","published_at":"2026-10-22T16:46:33Z","references":["https://osv.dev/vulnerability/GHSA-98mx-cjp9-gchm","https://github.com/electron/electron/security/advisories/GHSA-98mx-cjp9-gchm","https://nvd.nist.gov/vuln/detail/CVE-2026-113797","https://github.com/electron/electron/pull/53356","https://github.com/electron/electron/pull/53355","https://github.com/electron/electron/pull/53354","https://github.com/electron/electron/pull/53353","https://github.com/electron/electron/pull/52597","https://github.com/electron/electron/commit/f3ae30fab9aabfd445eedff4dd7a2f003eb1ff2f","https://github.com/electron/electron/commit/d6529d65e5f096cd45bbb2828febb2c6baa53921","https://github.com/electron/electron/commit/b1eb86ca8f6fa39fe9d5fee21bb9a0bf591a6a3f","https://github.com/electron/electron/commit/5acc76667d32ff310d04f965b47983412ab6553c","https://github.com/electron/electron/commit/16e6103c1d84cd1c46336647b55e96414da501a4","https://github.com/electron/electron/releases/tag/v42.11.1","https://github.com/electron/electron/releases/tag/v43.5.1","https://github.com/electron/electron/releases/tag/v44.1.1","https://github.com/electron/electron/releases/tag/v45.0.0-alpha.4","https://github.com/electron/electron"],"severity":{"label":"low","score":3.1},"sources":[{"source":"osv","source_id":"GHSA-98mx-cjp9-gchm","url":"https://osv.dev/vulnerability/GHSA-98mx-cjp9-gchm"}],"summary":"Electron: Extension tabs.query returns tab URLs and titles without the tabs permission"}