{"action":"Upgrade hermes-engine to 0.5.2 or later.","affected":[{"fixed":"0.5.2","introduced":"0"}],"component":"hermes-engine","cve_ids":["CVE-2020-1912"],"ecosystem":"npm","epss":0.01813,"exploited":false,"fixed_versions":["0.5.2"],"ghsa_id":"GHSA-pf27-929j-9pmm","id":"tcs_01M5KG3C8YVCSNEA18HJ1QR0RS","modified_at":"2023-11-08T04:02:45.132870Z","published_at":"2022-05-24T17:27:38Z","references":["https://osv.dev/vulnerability/GHSA-pf27-929j-9pmm","https://nvd.nist.gov/vuln/detail/CVE-2020-1912","https://github.com/facebook/hermes/commit/091835377369c8fd5917d9b87acffa721ad2a168","https://www.facebook.com/security/advisories/cve-2020-1912"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-pf27-929j-9pmm","url":"https://osv.dev/vulnerability/GHSA-pf27-929j-9pmm"}],"summary":"Out-of-bounds Read and Out-of-bounds Write in Facebook Hermes"}