{"action":"Upgrade electron to 1.7.13 or later.","affected":[{"fixed":"1.7.13","introduced":"1.7.0"},{"fixed":"1.8.4","introduced":"1.8.0"},{"fixed":"2.0.0-beta.5","introduced":"2.0.0-beta.1"}],"component":"electron","cve_ids":["CVE-2018-1000136"],"ecosystem":"npm","epss":0.05082,"exploited":false,"fixed_versions":["1.7.13","1.8.4","2.0.0-beta.5"],"ghsa_id":"GHSA-8xwg-wv7v-4vqp","id":"tcs_01M5KFEBD2JYX08SHRRWPDG6ST","modified_at":"2023-11-08T03:59:35.638763Z","published_at":"2018-03-26T16:41:17Z","references":["https://osv.dev/vulnerability/GHSA-8xwg-wv7v-4vqp","https://nvd.nist.gov/vuln/detail/CVE-2018-1000136","https://github.com/electron/electron/pull/12271","https://github.com/electron/electron/pull/12292","https://github.com/electron/electron/pull/12294","https://github.com/electron/electron/commit/1a48ee28276e6588dbf4e70e58d78e7bfdc57043","https://electronjs.org/blog/webview-fix","https://github.com/electron/electron","https://www.electronjs.org/blog/webview-fix","https://www.npmjs.com/advisories/574","https://www.trustwave.com/Resources/SpiderLabs-Blog/CVE-2018-1000136---Electron-nodeIntegration-Bypass"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-8xwg-wv7v-4vqp","url":"https://osv.dev/vulnerability/GHSA-8xwg-wv7v-4vqp"}],"summary":"Electron Vulnerable to Code Execution by Re-Enabling Node.js Integration"}