{"action":"Upgrade electron to 9.4.0 or later.","affected":[{"fixed":"9.4.0","introduced":"0"},{"fixed":"10.2.0","introduced":"10.0.0"},{"fixed":"11.1.0","introduced":"11.0.0"}],"component":"electron","cve_ids":["CVE-2020-26272"],"ecosystem":"npm","epss":0.01746,"exploited":false,"fixed_versions":["9.4.0","10.2.0","11.1.0"],"ghsa_id":"GHSA-hvf8-h2qh-37m9","id":"tcs_01M5KFW3KVGP2RZXGPDRJSR8GK","modified_at":"2026-09-10T03:49:13.924733317Z","published_at":"2021-01-28T19:11:34Z","references":["https://osv.dev/vulnerability/GHSA-hvf8-h2qh-37m9","https://github.com/electron/electron/security/advisories/GHSA-hvf8-h2qh-37m9","https://nvd.nist.gov/vuln/detail/CVE-2020-26272","https://github.com/electron/electron/pull/26875","https://github.com/electron/electron/commit/07a1c2a3e5845901f7e2eda9506695be58edc73c","https://github.com/electron/electron/commit/0bbd268eb4caf35604443df5ff196980dd49e208","https://github.com/electron/electron/commit/36c695ce2a7e22c07fe1e30c61c00d20371daee2","https://github.com/electron/electron/commit/429400040ecb16a21d19936658579e65a797e4cc","https://github.com/electron/electron/commit/5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd","https://github.com/electron/electron/releases/tag/v9.4.0","https://www.electronjs.org/releases/stable?version=9#9.4.0"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-hvf8-h2qh-37m9","url":"https://osv.dev/vulnerability/GHSA-hvf8-h2qh-37m9"}],"summary":"IPC messages delivered to the wrong frame in Electron"}