Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:npm/electron@1.8.2-beta4
Typenpm
Namespace
Nameelectron
Version1.8.2-beta4
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version35.7.5
Latest_non_vulnerable_version42.0.0-alpha.5
Affected_by_vulnerabilities
0
url VCID-ycrz-abm9-hbat
vulnerability_id VCID-ycrz-abm9-hbat
summary 
OS Command Injection
Github Electron version Electron contains a Command Injection vulnerability in Protocol Handler that can result in command execute.This issue is due to an incomplete fix for CVE-2018-1000006, specifically the block list used was not case insensitive allowing an attacker to potentially bypass it.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000118
reference_id
reference_type
scores
0
value 0.04546
scoring_system epss
scoring_elements 0.89136
published_at 2026-04-01T12:55:00Z
1
value 0.05222
scoring_system epss
scoring_elements 0.89961
published_at 2026-04-21T12:55:00Z
2
value 0.05222
scoring_system epss
scoring_elements 0.89924
published_at 2026-04-04T12:55:00Z
3
value 0.05222
scoring_system epss
scoring_elements 0.8993
published_at 2026-04-07T12:55:00Z
4
value 0.05222
scoring_system epss
scoring_elements 0.89946
published_at 2026-04-08T12:55:00Z
5
value 0.05222
scoring_system epss
scoring_elements 0.89952
published_at 2026-04-09T12:55:00Z
6
value 0.05222
scoring_system epss
scoring_elements 0.89959
published_at 2026-04-11T12:55:00Z
7
value 0.05222
scoring_system epss
scoring_elements 0.89957
published_at 2026-04-12T12:55:00Z
8
value 0.05222
scoring_system epss
scoring_elements 0.89951
published_at 2026-04-13T12:55:00Z
9
value 0.05222
scoring_system epss
scoring_elements 0.89964
published_at 2026-04-16T12:55:00Z
10
value 0.05222
scoring_system epss
scoring_elements 0.89965
published_at 2026-04-18T12:55:00Z
11
value 0.05222
scoring_system epss
scoring_elements 0.89911
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000118
1
reference_url https://electronjs.org/releases#1.8.2-beta.5
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://electronjs.org/releases#1.8.2-beta.5
2
reference_url https://github.com/advisories/GHSA-fjqr-fx3f-g4rv
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-fjqr-fx3f-g4rv
3
reference_url https://github.com/electron/electron/commit/ce361a12e355f9e1e99c989f1ea056c9e502dbe7
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/electron/electron/commit/ce361a12e355f9e1e99c989f1ea056c9e502dbe7
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-1000118
reference_id CVE-2018-1000118
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-1000118
fixed_packages
0
url pkg:npm/electron@1.8.2-beta5
purl pkg:npm/electron@1.8.2-beta5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@1.8.2-beta5
1
url pkg:npm/electron@1.8.2
purl pkg:npm/electron@1.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-4s78-xt9y-1kew
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-fahk-eg3e-x7cu
7
vulnerability VCID-j7d6-zp3s-67fq
8
vulnerability VCID-nx5d-r4jc-77df
9
vulnerability VCID-p167-yf3n-6qd5
10
vulnerability VCID-q288-pvgc-vkaa
11
vulnerability VCID-qd52-rbd7-qkbn
12
vulnerability VCID-w7f7-5frp-n3br
13
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@1.8.2
aliases CVE-2018-1000118, GHSA-fjqr-fx3f-g4rv
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ycrz-abm9-hbat
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/electron@1.8.2-beta4