{"action":"Upgrade electron to 22.3.24 or later.","affected":[{"fixed":"22.3.24","introduced":"0"},{"fixed":"24.8.3","introduced":"24.0.0-alpha.1"},{"fixed":"25.8.1","introduced":"25.0.0-alpha.1"},{"fixed":"26.2.1","introduced":"26.0.0-alpha.1"},{"fixed":"27.0.0-alpha.7","introduced":"27.0.0-alpha.1"},{"introduced":"23.0.0-alpha.1","last_affected":"23.3.13"}],"component":"electron","cve_ids":["CVE-2023-44402"],"ecosystem":"npm","epss":0.00207,"exploited":false,"fixed_versions":["22.3.24","24.8.3","25.8.1","26.2.1","27.0.0-alpha.7"],"ghsa_id":"GHSA-7m48-wc93-9g85","id":"tcs_01M5KFAC7KAANP3A8419BR2Q2N","modified_at":"2026-09-10T03:49:59.555264356Z","published_at":"2023-12-01T21:32:06Z","references":["https://osv.dev/vulnerability/GHSA-7m48-wc93-9g85","https://github.com/electron/electron/security/advisories/GHSA-7m48-wc93-9g85","https://nvd.nist.gov/vuln/detail/CVE-2023-44402","https://github.com/electron/electron/pull/39788","https://github.com/electron/electron","https://www.electronjs.org/docs/latest/tutorial/fuses"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-7m48-wc93-9g85","url":"https://osv.dev/vulnerability/GHSA-7m48-wc93-9g85"}],"summary":"ASAR Integrity bypass via filetype confusion in electron"}