{"action":"Upgrade electron to 11.5.0 or later.","affected":[{"fixed":"11.5.0","introduced":"0"},{"fixed":"12.1.0","introduced":"12.0.0"},{"fixed":"13.3.0","introduced":"13.0.0"}],"component":"electron","cve_ids":["CVE-2021-39184"],"ecosystem":"npm","epss":0.0105,"exploited":false,"fixed_versions":["11.5.0","12.1.0","13.3.0"],"ghsa_id":"GHSA-mpjm-v997-c4h4","id":"tcs_01M5KG1BEJ068FCHBXAQH13FYW","modified_at":"2026-07-08T06:29:30.611712544Z","published_at":"2021-10-12T21:59:13Z","references":["https://osv.dev/vulnerability/GHSA-mpjm-v997-c4h4","https://github.com/electron/electron/security/advisories/GHSA-mpjm-v997-c4h4","https://nvd.nist.gov/vuln/detail/CVE-2021-39184","https://github.com/electron/electron/pull/30728","https://github.com/electron/electron/pull/30728/commits/8fed645bd671f359ee52d806c075ec4e07eda17f","https://github.com/electron/electron"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-mpjm-v997-c4h4","url":"https://osv.dev/vulnerability/GHSA-mpjm-v997-c4h4"}],"summary":"Electron's sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API"}