{"action":"Upgrade hermes-engine to 0.7.2 or later.","affected":[{"fixed":"0.7.2","introduced":"0"}],"component":"hermes-engine","cve_ids":["CVE-2020-1914"],"ecosystem":"npm","epss":0.02515,"exploited":false,"fixed_versions":["0.7.2"],"ghsa_id":"GHSA-327c-qx3v-h673","id":"tcs_01M5KEVJ80750JW8R45NTCF1RK","modified_at":"2023-11-08T04:02:45.253678Z","published_at":"2022-05-24T17:30:18Z","references":["https://osv.dev/vulnerability/GHSA-327c-qx3v-h673","https://nvd.nist.gov/vuln/detail/CVE-2020-1914","https://github.com/facebook/hermes/issues/373","https://github.com/facebook/hermes/commit/b2021df620824627f5a8c96615edbd1eb7fdddfc","https://github.com/facebook/hermes","https://www.facebook.com/security/advisories/cve-2020-1914"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-327c-qx3v-h673","url":"https://osv.dev/vulnerability/GHSA-327c-qx3v-h673"}],"summary":"Always-Incorrect Control Flow Implementation in Facebook Hermes"}