{"action":"Upgrade electron to 6.1.11 or later.","affected":[{"fixed":"6.1.11","introduced":"0"},{"fixed":"7.2.4","introduced":"7.0.0"},{"fixed":"8.2.4","introduced":"8.0.0"}],"component":"electron","cve_ids":["CVE-2020-15096"],"ecosystem":"npm","epss":0.0081,"exploited":false,"fixed_versions":["6.1.11","7.2.4","8.2.4"],"ghsa_id":"GHSA-6vrv-94jv-crrg","id":"tcs_01M5KF82EXCS0AVA85BSMR0BPZ","modified_at":"2026-07-08T06:28:15.160310378Z","published_at":"2020-07-07T00:01:05Z","references":["https://osv.dev/vulnerability/GHSA-6vrv-94jv-crrg","https://github.com/electron/electron/security/advisories/GHSA-6vrv-94jv-crrg","https://nvd.nist.gov/vuln/detail/CVE-2020-15096","https://www.electronjs.org/releases/stable?page=3#release-notes-for-v824"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-6vrv-94jv-crrg","url":"https://osv.dev/vulnerability/GHSA-6vrv-94jv-crrg"}],"summary":"Context isolation bypass via Promise in Electron"}