{"action":"Upgrade puppeteer to 1.13.0 or later.","affected":[{"fixed":"1.13.0","introduced":"0"}],"component":"puppeteer","cve_ids":["CVE-2019-5786"],"ecosystem":"npm","epss":0.61085,"exploited":true,"fixed_versions":["1.13.0"],"ghsa_id":"GHSA-c2gp-86p4-5935","id":"tcs_01M5KFHF9DE7XZTQKQQSF6JCDA","modified_at":"2023-11-08T04:01:37.201603Z","published_at":"2020-09-02T18:25:43Z","references":["https://osv.dev/vulnerability/GHSA-c2gp-86p4-5935","https://nvd.nist.gov/vuln/detail/CVE-2019-5786","https://github.com/GoogleChrome/puppeteer/issues/4141","https://blog.exodusintel.com/2019/03/20/cve-2019-5786-analysis-and-exploitation","https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop.html","https://crbug.com/936448","https://github.com/GoogleChrome/puppeteer","https://snyk.io/vuln/SNYK-JS-PUPPETEER-174321","https://www.npmjs.com/advisories/824"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-c2gp-86p4-5935","url":"https://osv.dev/vulnerability/GHSA-c2gp-86p4-5935"},{"source":"kev","source_id":"CVE-2019-5786","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}],"summary":"Use-After-Free in puppeteer"}