{"action":"Upgrade hermes-engine to 0.5.2 or later.","affected":[{"fixed":"0.5.2","introduced":"0"}],"component":"hermes-engine","cve_ids":["CVE-2020-1911"],"ecosystem":"npm","epss":0.02003,"exploited":false,"fixed_versions":["0.5.2"],"ghsa_id":"GHSA-f5x2-xv93-4p23","id":"tcs_01M5KFMK45P5W24M5RA00RRN1F","modified_at":"2023-11-08T04:02:45.072039Z","published_at":"2022-05-24T17:27:24Z","references":["https://osv.dev/vulnerability/GHSA-f5x2-xv93-4p23","https://nvd.nist.gov/vuln/detail/CVE-2020-1911","https://github.com/facebook/hermes/commit/fe52854cdf6725c2eaa9e125995da76e6ceb27da","https://www.facebook.com/security/advisories/cve-2020-1911"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-f5x2-xv93-4p23","url":"https://osv.dev/vulnerability/GHSA-f5x2-xv93-4p23"}],"summary":"Access of Resource Using Incompatible Type in Facebook Hermes"}