{"action":"Upgrade electron to 42.11.9 or later.","affected":[{"fixed":"45.0.0-alpha.13","introduced":"45.0.0-alpha.1"},{"fixed":"44.5.0","introduced":"44.0.0-alpha.1"},{"fixed":"43.7.6","introduced":"43.0.0-alpha.1"},{"fixed":"42.11.9","introduced":"0"}],"component":"electron","cve_ids":["CVE-2026-113798"],"ecosystem":"npm","exploited":false,"fixed_versions":["45.0.0-alpha.13","44.5.0","43.7.6","42.11.9"],"ghsa_id":"GHSA-x562-297c-g43g","id":"tcs_01M5JMDBY1N0QC7WFZ6SSJBAE2","modified_at":"2026-10-22T17:00:04.181178853Z","published_at":"2026-10-22T16:47:15Z","references":["https://osv.dev/vulnerability/GHSA-x562-297c-g43g","https://github.com/electron/electron/security/advisories/GHSA-x562-297c-g43g","https://nvd.nist.gov/vuln/detail/CVE-2026-113798","https://github.com/electron/electron/pull/54466","https://github.com/electron/electron/pull/54465","https://github.com/electron/electron/pull/54464","https://github.com/electron/electron/pull/54463","https://github.com/electron/electron/pull/54432","https://github.com/electron/electron/commit/a48e6eaaafa85b6fc40f7431ceec4fd6ef4bb899","https://github.com/electron/electron/commit/4073e9f4712f61e6b8abd5548673cc7638f6c1a1","https://github.com/electron/electron/commit/1755ee598697356959219beefee1e139bc3f8207","https://github.com/electron/electron/commit/0b680cfa1ffa70a50282da53efde37a210d5223b","https://github.com/electron/electron/commit/076c7496791a45968cf8d9e76e9657bc161ea979","https://github.com/electron/electron/releases/tag/v42.11.9","https://github.com/electron/electron/releases/tag/v43.7.6","https://github.com/electron/electron/releases/tag/v44.5.0","https://github.com/electron/electron/releases/tag/v45.0.0-alpha.13","https://github.com/electron/electron"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-x562-297c-g43g","url":"https://osv.dev/vulnerability/GHSA-x562-297c-g43g"}],"summary":"Electron: Pointer lock permission requests can be attributed to the wrong frame"}