You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that register custom protocol handlers can be tricked in arbitrary command execution if the user clicks on a specially crafted URL. This has been fixed in versions 1.8.2-beta.4, 1.7.11, and 1.6.16.
CVE-2018-1000006 - High Severity Vulnerability
A simple command-line interface framework for node.js.
Library home page: https://registry.npmjs.org/electron/-/electron-0.4.1.tgz
Path to dependency file: /package.json
Path to vulnerable library: /node_modules/electron/package.json
Dependency Hierarchy:
Found in HEAD commit: 3103722a2c09e9dcab37b1369a88b2bdf496cbdd
Found in base branch: main
GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that register custom protocol handlers can be tricked in arbitrary command execution if the user clicks on a specially crafted URL. This has been fixed in versions 1.8.2-beta.4, 1.7.11, and 1.6.16.
Publish Date: 2018-01-24
URL: CVE-2018-1000006
Base Score Metrics:
Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000006
Release Date: 2018-01-24
Fix Resolution: 1.8.2-beta.5
Step up your Open Source Security Game with Mend here
The text was updated successfully, but these errors were encountered: