{"action":"Upgrade nw to 0.23.6-1 or later.","affected":[{"fixed":"0.23.6-1","introduced":"0"}],"component":"nw","cve_ids":["CVE-2016-10588"],"ecosystem":"npm","epss":0.01728,"exploited":false,"fixed_versions":["0.23.6-1"],"ghsa_id":"GHSA-hv96-xxx2-5v7w","id":"tcs_01M5KFW35BRK3PZ9Q6VNGG7FN8","modified_at":"2023-11-08T03:58:14.344384Z","published_at":"2019-02-18T23:51:04Z","references":["https://osv.dev/vulnerability/GHSA-hv96-xxx2-5v7w","https://nvd.nist.gov/vuln/detail/CVE-2016-10588","https://github.com/nwjs/npm-installer/commit/adb4df1e012d38a3872578d484291b9af07aad5b","https://github.com/advisories/GHSA-hv96-xxx2-5v7w","https://www.npmjs.com/advisories/166"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-hv96-xxx2-5v7w","url":"https://osv.dev/vulnerability/GHSA-hv96-xxx2-5v7w"}],"summary":"Downloads Resources over HTTP in nw"}