{"action":"Upgrade Microsoft.ChakraCore to 1.11.8 or later.","affected":[{"fixed":"1.11.8","introduced":"0"}],"component":"Microsoft.ChakraCore","cve_ids":["CVE-2019-0860"],"ecosystem":"NuGet","epss":0.10799,"exploited":false,"fixed_versions":["1.11.8"],"ghsa_id":"GHSA-fv87-p7qr-xh5x","id":"tcs_01M5N8N2297TJ3CMCRMSZ5DH2T","modified_at":"2024-02-16T08:02:24.839420Z","published_at":"2022-05-13T01:21:40Z","references":["https://osv.dev/vulnerability/GHSA-fv87-p7qr-xh5x","https://nvd.nist.gov/vuln/detail/CVE-2019-0860","https://github.com/chakra-core/ChakraCore/pull/6087","https://github.com/chakra-core/ChakraCore/commit/9a9ece61b560fe84f451625140bb46d35fb3b045","https://github.com/chakra-core/ChakraCore","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0860","https://web.archive.org/web/20210724054200/http://www.securityfocus.com/bid/107722"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-fv87-p7qr-xh5x","url":"https://osv.dev/vulnerability/GHSA-fv87-p7qr-xh5x"}],"summary":"ChakraCore Memory Corruption Vulnerability"}