{"action":"Upgrade electron to 7.2.4 or later.","affected":[{"fixed":"7.2.4","introduced":"0"},{"fixed":"8.2.4","introduced":"8.0.0"}],"component":"electron","cve_ids":["CVE-2020-4077"],"ecosystem":"npm","epss":0.01003,"exploited":false,"fixed_versions":["7.2.4","8.2.4"],"ghsa_id":"GHSA-h9jc-284h-533g","id":"tcs_01M5KFTMQ1DFTT97GRZNFWD1P7","modified_at":"2026-07-08T06:29:45.073170767Z","published_at":"2020-07-07T00:01:10Z","references":["https://osv.dev/vulnerability/GHSA-h9jc-284h-533g","https://github.com/electron/electron/security/advisories/GHSA-h9jc-284h-533g","https://nvd.nist.gov/vuln/detail/CVE-2020-4077","https://github.com/electron/electron/commit/b8e347709245d2dc5640fbb3044d9b21b4eaa6b0","https://www.electronjs.org/releases/stable?page=3#release-notes-for-v824"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"GHSA-h9jc-284h-533g","url":"https://osv.dev/vulnerability/GHSA-h9jc-284h-533g"}],"summary":"Context isolation bypass via contextBridge in Electron"}