{"action":"Upgrade scratch-vm to 0.2.0-prerelease.20200714185213 or later.","affected":[{"fixed":"0.2.0-prerelease.20200714185213","introduced":"0"}],"component":"scratch-vm","cve_ids":["CVE-2020-14000"],"ecosystem":"npm","epss":0.0283,"exploited":false,"fixed_versions":["0.2.0-prerelease.20200714185213"],"ghsa_id":"GHSA-vc9j-fhvv-8vrf","id":"tcs_01M5KGBH9CWV9Z2QTGB1BF6C1V","modified_at":"2023-11-08T04:02:24.878433Z","published_at":"2020-07-27T19:55:52Z","references":["https://osv.dev/vulnerability/GHSA-vc9j-fhvv-8vrf","https://nvd.nist.gov/vuln/detail/CVE-2020-14000","https://github.com/LLK/scratch-vm/pull/2476","https://github.com/LLK/scratch-vm/pull/2476/commits/90b9da45f4084958535338d1c4d71a22d6136aab","https://github.com/LLK/scratch-vm","https://scratch.mit.edu/discuss/topic/422904/?page=1#post-4223443"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-vc9j-fhvv-8vrf","url":"https://osv.dev/vulnerability/GHSA-vc9j-fhvv-8vrf"}],"summary":"Remote Code Execution in scratch-vm"}