{"action":"Upgrade Microsoft.ChakraCore to 1.11.6 or later.","affected":[{"fixed":"1.11.6","introduced":"0"}],"component":"Microsoft.ChakraCore","cve_ids":["CVE-2019-0648"],"ecosystem":"NuGet","epss":0.05432,"exploited":false,"fixed_versions":["1.11.6"],"ghsa_id":"GHSA-wwfw-m54g-gv72","id":"tcs_01M5N94GPDRGQ4MADKX49EVJQY","modified_at":"2024-12-02T05:42:00.226168Z","published_at":"2022-05-13T01:21:25Z","references":["https://osv.dev/vulnerability/GHSA-wwfw-m54g-gv72","https://nvd.nist.gov/vuln/detail/CVE-2019-0648","https://github.com/chakra-core/ChakraCore/pull/5936","https://github.com/chakra-core/ChakraCore/commit/1a7790f873b1a73d1cfec9548eb08a3b9fd798f3","https://github.com/chakra-core/ChakraCore","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0648","https://web.archive.org/web/20210729110650/http://www.securityfocus.com/bid/106885"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-wwfw-m54g-gv72","url":"https://osv.dev/vulnerability/GHSA-wwfw-m54g-gv72"}],"summary":"ChakraCore information disclosure vulnerability"}