{"action":"Upgrade hermes-engine to 0.5.2 or later.","affected":[{"fixed":"0.5.2","introduced":"0"}],"component":"hermes-engine","cve_ids":["CVE-2020-1913"],"ecosystem":"npm","epss":0.01202,"exploited":false,"fixed_versions":["0.5.2"],"ghsa_id":"GHSA-gmpm-xp43-f7g6","id":"tcs_01M5KFS2SHQDS8HHV9MXWZRAWR","modified_at":"2023-11-08T04:02:45.193601Z","published_at":"2022-05-24T17:27:39Z","references":["https://osv.dev/vulnerability/GHSA-gmpm-xp43-f7g6","https://nvd.nist.gov/vuln/detail/CVE-2020-1913","https://github.com/facebook/hermes/commit/2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6","https://www.facebook.com/security/advisories/cve-2020-1913"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-gmpm-xp43-f7g6","url":"https://osv.dev/vulnerability/GHSA-gmpm-xp43-f7g6"}],"summary":"Signed to Unsigned Conversion Error in Facebook Hermes"}