{"action":"Upgrade ses to 1.12.0 or later.","affected":[{"fixed":"1.12.0","introduced":"0"}],"component":"ses","cve_ids":["CVE-2025-32792"],"ecosystem":"npm","epss":0.00587,"exploited":false,"fixed_versions":["1.12.0"],"ghsa_id":"GHSA-h9w6-f932-gq62","id":"tcs_01M5KFTNJZZK3MQP1S31PJXT1K","modified_at":"2025-04-18T18:34:51Z","published_at":"2025-04-18T15:10:05Z","references":["https://osv.dev/vulnerability/GHSA-h9w6-f932-gq62","https://github.com/endojs/endo/security/advisories/GHSA-h9w6-f932-gq62","https://nvd.nist.gov/vuln/detail/CVE-2025-32792","https://github.com/endojs/endo"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-h9w6-f932-gq62","url":"https://osv.dev/vulnerability/GHSA-h9w6-f932-gq62"},{"source":"nvd","source_id":"CVE-2025-32792","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32792"}],"summary":"ses's global contour bindings leak into Compartment lexical scope"}