{"action":"Upgrade Microsoft.ChakraCore to 1.8.2 or later.","affected":[{"fixed":"1.8.2","introduced":"0"}],"component":"Microsoft.ChakraCore","cve_ids":["CVE-2018-0939"],"ecosystem":"NuGet","epss":0.05501,"exploited":false,"fixed_versions":["1.8.2"],"ghsa_id":"GHSA-xgcc-r2f3-rq6p","id":"tcs_01M5N95CVTEX0M5QCPSZ8G5VCY","modified_at":"2024-02-16T08:03:32.016702Z","published_at":"2022-05-13T01:18:38Z","references":["https://osv.dev/vulnerability/GHSA-xgcc-r2f3-rq6p","https://nvd.nist.gov/vuln/detail/CVE-2018-0939","https://github.com/chakra-core/ChakraCore/commit/090277e7a5ea1d938777acb92e7b6759936ea974","https://github.com/chakra-core/ChakraCore","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0939","https://web.archive.org/web/20201021051922/http://www.securitytracker.com/id/1040507","https://web.archive.org/web/20210124145017/http://www.securityfocus.com/bid/103305"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-xgcc-r2f3-rq6p","url":"https://osv.dev/vulnerability/GHSA-xgcc-r2f3-rq6p"}],"summary":"ChakraCore information disclosure vulnerability"}