{"action":"Upgrade launch-editor to 2.14.1 or later.","affected":[{"fixed":"2.14.1","introduced":"0"}],"component":"launch-editor","cve_ids":["CVE-2026-53632"],"ecosystem":"npm","epss":0.00408,"exploited":false,"fixed_versions":["2.14.1"],"ghsa_id":"GHSA-v6wh-96g9-6wx3","id":"tcs_01M5KGB2GYYTY8JW79X2G31CFS","modified_at":"2026-09-10T03:50:50.705036566Z","published_at":"2026-06-15T17:18:31Z","references":["https://osv.dev/vulnerability/GHSA-v6wh-96g9-6wx3","https://github.com/vitejs/launch-editor/security/advisories/GHSA-v6wh-96g9-6wx3","https://github.com/vitejs/launch-editor"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-v6wh-96g9-6wx3","url":"https://osv.dev/vulnerability/GHSA-v6wh-96g9-6wx3"}],"summary":"launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows"}