{"action":"Upgrade @electron/packager to 18.3.1 or later.","affected":[{"fixed":"18.3.1","introduced":"18.3.0"}],"component":"@electron/packager","cve_ids":["CVE-2024-29900"],"ecosystem":"npm","epss":0.00633,"exploited":false,"fixed_versions":["18.3.1"],"ghsa_id":"GHSA-34h3-8mw4-qw57","id":"tcs_01M5KEVWMFFBEB6P0BF1MFQ0RZ","modified_at":"2026-09-10T03:50:09.985581070Z","published_at":"2024-03-29T20:16:22Z","references":["https://osv.dev/vulnerability/GHSA-34h3-8mw4-qw57","https://github.com/electron/packager/security/advisories/GHSA-34h3-8mw4-qw57","https://nvd.nist.gov/vuln/detail/CVE-2024-29900","https://github.com/electron/packager/commit/d421d4bd3ced889a4143c5c3ab6d95e3be249eee","https://github.com/electron/packager"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-34h3-8mw4-qw57","url":"https://osv.dev/vulnerability/GHSA-34h3-8mw4-qw57"}],"summary":"@electron/packager's build process memory potentially leaked into final executable"}