{"action":"Upgrade electron to 1.6.16 or later.","affected":[{"fixed":"1.7.11","introduced":"1.7.0"},{"fixed":"1.6.16","introduced":"1.6.0"},{"fixed":"1.8.2-beta.4","introduced":"1.8.0"}],"component":"electron","cve_ids":["CVE-2018-1000006"],"ecosystem":"npm","epss":0.84381,"exploited":false,"fixed_versions":["1.7.11","1.6.16","1.8.2-beta.4"],"ghsa_id":"GHSA-w222-53c6-c86p","id":"tcs_01M5KGDBPH4FDMV680KQHCJ0PT","modified_at":"2023-11-08T03:59:33.174686Z","published_at":"2018-01-23T03:57:44Z","references":["https://osv.dev/vulnerability/GHSA-w222-53c6-c86p","https://nvd.nist.gov/vuln/detail/CVE-2018-1000006","https://electronjs.org/blog/protocol-handler-fix","https://github.com/advisories/GHSA-w222-53c6-c86p","https://github.com/electron/electron/releases/tag/v1.8.2-beta.4","https://medium.com/@Wflki/exploiting-electron-rce-in-exodus-wallet-d9e6db13c374","https://www.exploit-db.com/exploits/43899","https://www.exploit-db.com/exploits/44357","https://www.npmjs.com/advisories/563","http://www.securityfocus.com/bid/102796"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-w222-53c6-c86p","url":"https://osv.dev/vulnerability/GHSA-w222-53c6-c86p"}],"summary":"Remote Code Execution in electron"}