{"action":"Upgrade electron to 15.5.5 or later.","affected":[{"fixed":"15.5.5","introduced":"0"},{"fixed":"16.2.6","introduced":"16.0.0"},{"fixed":"17.2.0","introduced":"17.0.0"},{"fixed":"18.0.0-beta.6","introduced":"18.0.0-beta.1"}],"component":"electron","cve_ids":["CVE-2022-29247"],"ecosystem":"npm","epss":0.01048,"exploited":false,"fixed_versions":["15.5.5","16.2.6","17.2.0","18.0.0-beta.6"],"ghsa_id":"GHSA-mq8j-3h7h-p8g7","id":"tcs_01M5KG1FH03ECV9EXEPZEBGK6F","modified_at":"2023-11-08T04:09:12.104708Z","published_at":"2022-06-16T23:14:33Z","references":["https://osv.dev/vulnerability/GHSA-mq8j-3h7h-p8g7","https://github.com/electron/electron/security/advisories/GHSA-mq8j-3h7h-p8g7","https://nvd.nist.gov/vuln/detail/CVE-2022-29247","https://github.com/electron/electron"],"severity":{"label":"low","score":2.2},"sources":[{"source":"osv","source_id":"GHSA-mq8j-3h7h-p8g7","url":"https://osv.dev/vulnerability/GHSA-mq8j-3h7h-p8g7"}],"summary":"Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled"}