{"action":"Upgrade electron to 7.2.4 or later.","affected":[{"fixed":"7.2.4","introduced":"0"},{"fixed":"8.2.4","introduced":"8.0.0"}],"component":"electron","cve_ids":["CVE-2020-4076"],"ecosystem":"npm","epss":0.00367,"exploited":false,"fixed_versions":["7.2.4","8.2.4"],"ghsa_id":"GHSA-m93v-9qjc-3g79","id":"tcs_01M5KG088VH5GN26DG93YX4R10","modified_at":"2026-07-08T06:29:58.496729022Z","published_at":"2020-07-07T00:01:07Z","references":["https://osv.dev/vulnerability/GHSA-m93v-9qjc-3g79","https://github.com/electron/electron/security/advisories/GHSA-m93v-9qjc-3g79","https://nvd.nist.gov/vuln/detail/CVE-2020-4076","https://www.electronjs.org/releases/stable?page=3#release-notes-for-v824"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-m93v-9qjc-3g79","url":"https://osv.dev/vulnerability/GHSA-m93v-9qjc-3g79"}],"summary":"Context isolation bypass via leaked cross-context objects in Electron"}