{"action":"Upgrade electron to 1.6.8 or later.","affected":[{"fixed":"1.6.8","introduced":"0"}],"component":"electron","cve_ids":["CVE-2017-12581"],"ecosystem":"npm","epss":0.06693,"exploited":false,"fixed_versions":["1.6.8"],"ghsa_id":"GHSA-7fv9-m79r-j9x8","id":"tcs_01M5KF9W7G2DEZ9ZB2YMBBAMBQ","modified_at":"2023-11-08T03:58:52.151779Z","published_at":"2022-05-17T02:14:12Z","references":["https://osv.dev/vulnerability/GHSA-7fv9-m79r-j9x8","https://nvd.nist.gov/vuln/detail/CVE-2017-12581","https://github.com/electron/electron/commit/05b6d91bf4c1e0ee65eeef70cd5d1bd1df125644","https://blog.doyensec.com/2017/08/03/electron-framework-security.html","https://doyensec.com/resources/us-17-Carettoni-Electronegativity-A-Study-Of-Electron-Security.pdf","https://github.com/electron/electron"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-7fv9-m79r-j9x8","url":"https://osv.dev/vulnerability/GHSA-7fv9-m79r-j9x8"}],"summary":"Electron vulnerable to remote command execution"}