{"action":"Upgrade electron to 13.6.6 or later.","affected":[{"fixed":"13.6.6","introduced":"0"},{"fixed":"14.2.4","introduced":"14.0.0-beta.1"},{"fixed":"15.3.5","introduced":"15.0.0-beta.1"},{"fixed":"16.0.6","introduced":"16.0.0-beta.1"},{"fixed":"17.0.0-alpha.6","introduced":"17.0.0-alpha.1"}],"component":"electron","cve_ids":["CVE-2022-21718"],"ecosystem":"npm","epss":0.00946,"exploited":false,"fixed_versions":["13.6.6","14.2.4","15.3.5","16.0.6","17.0.0-alpha.6"],"ghsa_id":"GHSA-3p22-ghq8-v749","id":"tcs_01M5KEXSZ3V96PEQ2MTS5QKJ37","modified_at":"2023-11-08T04:08:09.293794Z","published_at":"2022-03-22T18:49:36Z","references":["https://osv.dev/vulnerability/GHSA-3p22-ghq8-v749","https://github.com/electron/electron/security/advisories/GHSA-3p22-ghq8-v749","https://nvd.nist.gov/vuln/detail/CVE-2022-21718","https://github.com/electron/electron/pull/32178","https://github.com/electron/electron/pull/32240","https://github.com/electron/electron"],"severity":{"label":"low","score":3.4},"sources":[{"source":"osv","source_id":"GHSA-3p22-ghq8-v749","url":"https://osv.dev/vulnerability/GHSA-3p22-ghq8-v749"}],"summary":"Renderers can obtain access to random bluetooth device without permission in Electron"}