{"action":"Upgrade electron to 22.3.19 or later.","affected":[{"fixed":"22.3.19","introduced":"0"},{"fixed":"23.3.13","introduced":"23.0.0-alpha.1"},{"fixed":"24.7.1","introduced":"24.0.0-alpha.1"},{"fixed":"25.5.0","introduced":"25.0.0-alpha.1"},{"fixed":"26.0.0-beta.13","introduced":"26.0.0-alpha.1"}],"component":"electron","cve_ids":["CVE-2023-39956"],"ecosystem":"npm","epss":0.00491,"exploited":false,"fixed_versions":["22.3.19","23.3.13","24.7.1","25.5.0","26.0.0-beta.13"],"ghsa_id":"GHSA-7x97-j373-85x5","id":"tcs_01M5KFB61TE64GDE678K4VKS04","modified_at":"2026-09-10T03:49:57.866467216Z","published_at":"2023-09-06T19:51:33Z","references":["https://osv.dev/vulnerability/GHSA-7x97-j373-85x5","https://github.com/electron/electron/security/advisories/GHSA-7x97-j373-85x5","https://nvd.nist.gov/vuln/detail/CVE-2023-39956","https://github.com/electron/electron"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-7x97-j373-85x5","url":"https://osv.dev/vulnerability/GHSA-7x97-j373-85x5"}],"summary":"Electron vulnerable to out-of-package code execution when launched with arbitrary cwd"}