{"action":"Upgrade electron to 7.2.4 or later.","affected":[{"fixed":"7.2.4","introduced":"0"},{"fixed":"8.2.4","introduced":"8.0.0"}],"component":"electron","cve_ids":["CVE-2020-4075"],"ecosystem":"npm","epss":0.01175,"exploited":false,"fixed_versions":["7.2.4","8.2.4"],"ghsa_id":"GHSA-f9mq-jph6-9mhm","id":"tcs_01M5KFN5YGJ7YYTGAXK89E2P4Q","modified_at":"2026-07-08T05:59:36.781612037Z","published_at":"2020-07-07T00:01:13Z","references":["https://osv.dev/vulnerability/GHSA-f9mq-jph6-9mhm","https://github.com/electron/electron/security/advisories/GHSA-f9mq-jph6-9mhm","https://nvd.nist.gov/vuln/detail/CVE-2020-4075","https://www.electronjs.org/releases/stable?page=3#release-notes-for-v824"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-f9mq-jph6-9mhm","url":"https://osv.dev/vulnerability/GHSA-f9mq-jph6-9mhm"}],"summary":"Arbitrary file read via window-open IPC in Electron"}