Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:npm/electron@1.7.16
Typenpm
Namespace
Nameelectron
Version1.7.16
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.8.2-beta5
Latest_non_vulnerable_version42.0.0-alpha.5
Affected_by_vulnerabilities
0
url VCID-c9ut-fk1h-gfe4
vulnerability_id VCID-c9ut-fk1h-gfe4
summary 
Trust Boundary Violation
In Electron, there is a context isolation bypass, meaning that code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions. Apps using `contextIsolation` are affected.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-15096
reference_id
reference_type
scores
0
value 0.0042
scoring_system epss
scoring_elements 0.62253
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-15096
1
reference_url https://github.com/electron/electron/security/advisories/GHSA-6vrv-94jv-crrg
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/electron/electron/security/advisories/GHSA-6vrv-94jv-crrg
2
reference_url https://www.electronjs.org/releases/stable?page=3#release-notes-for-v824
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://www.electronjs.org/releases/stable?page=3#release-notes-for-v824
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-15096
reference_id CVE-2020-15096
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-15096
fixed_packages
0
url pkg:npm/electron@6.1.1
purl pkg:npm/electron@6.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-p3vt-avbt-kyed
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@6.1.1
1
url pkg:npm/electron@6.1.11
purl pkg:npm/electron@6.1.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-p3vt-avbt-kyed
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@6.1.11
2
url pkg:npm/electron@7.2.4
purl pkg:npm/electron@7.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-p3vt-avbt-kyed
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@7.2.4
3
url pkg:npm/electron@8.2.4
purl pkg:npm/electron@8.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nm8y-5g5d-quaf
1
vulnerability VCID-p3vt-avbt-kyed
2
vulnerability VCID-xngs-29hg-7kh9
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.2.4
4
url pkg:npm/electron@9.0.1
purl pkg:npm/electron@9.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nm8y-5g5d-quaf
1
vulnerability VCID-p3vt-avbt-kyed
2
vulnerability VCID-xngs-29hg-7kh9
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@9.0.1
aliases CVE-2020-15096, GHSA-6vrv-94jv-crrg
risk_score 3.0
exploitability 0.5
weighted_severity 6.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c9ut-fk1h-gfe4
1
url VCID-p3vt-avbt-kyed
vulnerability_id VCID-p3vt-avbt-kyed
summary 
IPC messages delivered to the wrong frame in Electron
IPC messages sent from the main process to a subframe in the renderer process, through `webContents.sendToFrame`, `event.reply` or when using the `remote` module, can in some cases be delivered to the wrong frame.

If your app does ANY of the following, then it is impacted by this issue:
- Uses `remote`
- Calls `webContents.sendToFrame`
- Calls `event.reply` in an IPC message handler
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-26272
reference_id
reference_type
scores
0
value 0.00965
scoring_system epss
scoring_elements 0.76899
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-26272
1
reference_url https://github.com/electron/electron/commit/07a1c2a3e5845901f7e2eda9506695be58edc73c
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/electron/electron/commit/07a1c2a3e5845901f7e2eda9506695be58edc73c
2
reference_url https://github.com/electron/electron/commit/0bbd268eb4caf35604443df5ff196980dd49e208
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/electron/electron/commit/0bbd268eb4caf35604443df5ff196980dd49e208
3
reference_url https://github.com/electron/electron/commit/36c695ce2a7e22c07fe1e30c61c00d20371daee2
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/electron/electron/commit/36c695ce2a7e22c07fe1e30c61c00d20371daee2
4
reference_url https://github.com/electron/electron/commit/429400040ecb16a21d19936658579e65a797e4cc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/electron/electron/commit/429400040ecb16a21d19936658579e65a797e4cc
5
reference_url https://github.com/electron/electron/commit/5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/electron/electron/commit/5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd
6
reference_url https://github.com/electron/electron/pull/26875
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/electron/electron/pull/26875
7
reference_url https://github.com/electron/electron/releases/tag/v9.4.0
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/electron/electron/releases/tag/v9.4.0
8
reference_url https://www.electronjs.org/releases/stable?version=9#9.4.0
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.electronjs.org/releases/stable?version=9#9.4.0
9
reference_url https://security.archlinux.org/AVG-1503
reference_id AVG-1503
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1503
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-26272
reference_id CVE-2020-26272
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-26272
11
reference_url https://github.com/advisories/GHSA-hvf8-h2qh-37m9
reference_id GHSA-hvf8-h2qh-37m9
reference_type
scores
url https://github.com/advisories/GHSA-hvf8-h2qh-37m9
12
reference_url https://github.com/electron/electron/security/advisories/GHSA-hvf8-h2qh-37m9
reference_id GHSA-hvf8-h2qh-37m9
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/electron/electron/security/advisories/GHSA-hvf8-h2qh-37m9
fixed_packages
0
url pkg:npm/electron@9.4.0
purl pkg:npm/electron@9.4.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@9.4.0
1
url pkg:npm/electron@10.2.0
purl pkg:npm/electron@10.2.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@10.2.0
2
url pkg:npm/electron@11.1.0
purl pkg:npm/electron@11.1.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@11.1.0
aliases CVE-2020-26272, GHSA-hvf8-h2qh-37m9
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p3vt-avbt-kyed
Fixing_vulnerabilities
0
url VCID-ddtu-tckn-d7b1
vulnerability_id VCID-ddtu-tckn-d7b1
summary 
Command Injection
[electron] A remote code execution vulnerability has been discovered affecting apps with the ability to open nested child windows on Electron versions (3.0.0-beta.6, 2.0.7, 1.8.7, and 1.7.15).
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-15685
reference_id
reference_type
scores
0
value 0.12681
scoring_system epss
scoring_elements 0.94113
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-15685
1
reference_url https://electronjs.org/blog/web-preferences-fix
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://electronjs.org/blog/web-preferences-fix
2
reference_url https://github.com/electron/electron
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/electron/electron
3
reference_url https://github.com/electron/electron/commit/519a02d8d4d28e8a467acb40fb26172a80c9454f
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/electron/electron/commit/519a02d8d4d28e8a467acb40fb26172a80c9454f
4
reference_url https://github.com/electron/electron/commit/80221e52d93a96ea704cb6748ead669c55cff504
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/electron/electron/commit/80221e52d93a96ea704cb6748ead669c55cff504
5
reference_url https://github.com/electron/electron/commit/bab968ca776be28791e4dddfd50c86bd5fae62fa
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/electron/electron/commit/bab968ca776be28791e4dddfd50c86bd5fae62fa
6
reference_url https://github.com/electron/electron/commit/ef0a6d9a1c96efc4657c6dd3a6624eba969f095b
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/electron/electron/commit/ef0a6d9a1c96efc4657c6dd3a6624eba969f095b
7
reference_url https://www.contrastsecurity.com/security-influencers/cve-2018-15685
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.contrastsecurity.com/security-influencers/cve-2018-15685
8
reference_url https://www.exploit-db.com/exploits/45272
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.exploit-db.com/exploits/45272
9
reference_url https://www.exploit-db.com/exploits/45272/
reference_id
reference_type
scores
url https://www.exploit-db.com/exploits/45272/
10
reference_url https://www.npmjs.com/advisories/732
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.npmjs.com/advisories/732
11
reference_url https://github.com/nodejs/security-wg/blob/main/vuln/npm/466.json
reference_id 466
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements
url https://github.com/nodejs/security-wg/blob/main/vuln/npm/466.json
12
reference_url https://github.com/matt-/CVE-2018-15685
reference_id CVE-2018-15685
reference_type exploit
scores
url https://github.com/matt-/CVE-2018-15685
13
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/45272.txt
reference_id CVE-2018-15685
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/45272.txt
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-15685
reference_id CVE-2018-15685
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-15685
fixed_packages
0
url pkg:npm/electron@1.7.16
purl pkg:npm/electron@1.7.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-c9ut-fk1h-gfe4
1
vulnerability VCID-p3vt-avbt-kyed
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@1.7.16
1
url pkg:npm/electron@1.8.8
purl pkg:npm/electron@1.8.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-c9ut-fk1h-gfe4
1
vulnerability VCID-p3vt-avbt-kyed
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@1.8.8
2
url pkg:npm/electron@2.0.8-nightly.20180819
purl pkg:npm/electron@2.0.8-nightly.20180819
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-c9ut-fk1h-gfe4
1
vulnerability VCID-p3vt-avbt-kyed
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@2.0.8-nightly.20180819
3
url pkg:npm/electron@2.0.8
purl pkg:npm/electron@2.0.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-c9ut-fk1h-gfe4
1
vulnerability VCID-p3vt-avbt-kyed
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@2.0.8
4
url pkg:npm/electron@3.0.0-beta.3
purl pkg:npm/electron@3.0.0-beta.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-c9ut-fk1h-gfe4
1
vulnerability VCID-p3vt-avbt-kyed
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@3.0.0-beta.3
5
url pkg:npm/electron@3.0.0-beta.7
purl pkg:npm/electron@3.0.0-beta.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-c9ut-fk1h-gfe4
1
vulnerability VCID-p3vt-avbt-kyed
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@3.0.0-beta.7
6
url pkg:npm/electron@3.0.0
purl pkg:npm/electron@3.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-c9ut-fk1h-gfe4
1
vulnerability VCID-p3vt-avbt-kyed
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@3.0.0
aliases CVE-2018-15685, GHSA-hv9c-qwqg-qj3v
risk_score 10.0
exploitability 2.0
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ddtu-tckn-d7b1
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/electron@1.7.16