{"action":"Upgrade electron to 19.1.8 or later.","affected":[{"fixed":"19.1.8","introduced":"19.0.0"}],"component":"electron","cve_ids":["CVE-2022-4135"],"ecosystem":"npm","epss":0.31864,"exploited":true,"fixed_versions":["19.1.8"],"ghsa_id":"GHSA-995f-9x5r-2rcj","id":"tcs_01M5KFF9YZKKHVQ0CSQZ6CYMPT","modified_at":"2023-11-08T04:10:29.740914Z","published_at":"2022-11-25T03:30:19Z","references":["https://osv.dev/vulnerability/GHSA-995f-9x5r-2rcj","https://nvd.nist.gov/vuln/detail/CVE-2022-4135","https://github.com/electron/electron/pull/36444","https://github.com/electron/electron/pull/36447","https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_24.html","https://crbug.com/1392715","https://security.gentoo.org/glsa/202305-10"],"severity":{"label":"critical","score":9.6},"sources":[{"source":"osv","source_id":"GHSA-995f-9x5r-2rcj","url":"https://osv.dev/vulnerability/GHSA-995f-9x5r-2rcj"},{"source":"kev","source_id":"CVE-2022-4135","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}],"summary":"Heap buffer overflow in GPU"}