Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-6pvc-cdyz-gkcv
Summary
Unpreventable top-level navigation
### Impact
The `will-navigate` event that apps use to prevent navigations to unexpected destinations [as per our security recommendations](https://www.electronjs.org/docs/tutorial/security) can be bypassed when a sub-frame performs a top-frame navigation across sites.

### Patches

* `11.0.0-beta.1`
* `10.0.1`
* `9.3.0`
* `8.5.1`

### Workarounds
Sandbox all your iframes using the [`sandbox` attribute](https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe#attr-sandbox).  This will prevent them creating top-frame navigations and is good practice anyway.

### For more information
If you have any questions or comments about this advisory:

* Email us at security@electronjs.org
Aliases
0
alias CVE-2020-15174
1
alias GHSA-2q4g-w47c-4674
Fixed_packages
0
url pkg:npm/electron@8.5.1
purl pkg:npm/electron@8.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-7eu1-94qk-nuar
2
vulnerability VCID-a795-r67e-p3ck
3
vulnerability VCID-a84t-cjcb-tqcw
4
vulnerability VCID-f81v-9fv8-93cd
5
vulnerability VCID-j7d6-zp3s-67fq
6
vulnerability VCID-nx5d-r4jc-77df
7
vulnerability VCID-p167-yf3n-6qd5
8
vulnerability VCID-qd4u-smpr-auc1
9
vulnerability VCID-qd52-rbd7-qkbn
10
vulnerability VCID-w7f7-5frp-n3br
11
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.5.1
1
url pkg:npm/electron@9.3.0
purl pkg:npm/electron@9.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-7eu1-94qk-nuar
2
vulnerability VCID-a795-r67e-p3ck
3
vulnerability VCID-a84t-cjcb-tqcw
4
vulnerability VCID-f81v-9fv8-93cd
5
vulnerability VCID-j7d6-zp3s-67fq
6
vulnerability VCID-nx5d-r4jc-77df
7
vulnerability VCID-p167-yf3n-6qd5
8
vulnerability VCID-qd4u-smpr-auc1
9
vulnerability VCID-qd52-rbd7-qkbn
10
vulnerability VCID-w7f7-5frp-n3br
11
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@9.3.0
2
url pkg:npm/electron@10.0.1
purl pkg:npm/electron@10.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-7eu1-94qk-nuar
2
vulnerability VCID-a795-r67e-p3ck
3
vulnerability VCID-a84t-cjcb-tqcw
4
vulnerability VCID-f81v-9fv8-93cd
5
vulnerability VCID-j7d6-zp3s-67fq
6
vulnerability VCID-nx5d-r4jc-77df
7
vulnerability VCID-p167-yf3n-6qd5
8
vulnerability VCID-qd4u-smpr-auc1
9
vulnerability VCID-qd52-rbd7-qkbn
10
vulnerability VCID-w7f7-5frp-n3br
11
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@10.0.1
Affected_packages
0
url pkg:npm/electron@8.0.0-beta.0
purl pkg:npm/electron@8.0.0-beta.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6pvc-cdyz-gkcv
1
vulnerability VCID-qd4u-smpr-auc1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.0.0-beta.0
1
url pkg:npm/electron@8.0.0
purl pkg:npm/electron@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-9rnd-3aeh-g7hr
4
vulnerability VCID-a795-r67e-p3ck
5
vulnerability VCID-a84t-cjcb-tqcw
6
vulnerability VCID-f81v-9fv8-93cd
7
vulnerability VCID-fahk-eg3e-x7cu
8
vulnerability VCID-fbmd-b72k-f3dt
9
vulnerability VCID-j7d6-zp3s-67fq
10
vulnerability VCID-nx5d-r4jc-77df
11
vulnerability VCID-p167-yf3n-6qd5
12
vulnerability VCID-qd4u-smpr-auc1
13
vulnerability VCID-qd52-rbd7-qkbn
14
vulnerability VCID-rp33-97ps-7ufr
15
vulnerability VCID-w7f7-5frp-n3br
16
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.0.0
2
url pkg:npm/electron@8.0.1
purl pkg:npm/electron@8.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-9rnd-3aeh-g7hr
4
vulnerability VCID-a795-r67e-p3ck
5
vulnerability VCID-a84t-cjcb-tqcw
6
vulnerability VCID-f81v-9fv8-93cd
7
vulnerability VCID-fahk-eg3e-x7cu
8
vulnerability VCID-fbmd-b72k-f3dt
9
vulnerability VCID-j7d6-zp3s-67fq
10
vulnerability VCID-nx5d-r4jc-77df
11
vulnerability VCID-p167-yf3n-6qd5
12
vulnerability VCID-qd4u-smpr-auc1
13
vulnerability VCID-qd52-rbd7-qkbn
14
vulnerability VCID-rp33-97ps-7ufr
15
vulnerability VCID-w7f7-5frp-n3br
16
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.0.1
3
url pkg:npm/electron@8.0.2
purl pkg:npm/electron@8.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-9rnd-3aeh-g7hr
4
vulnerability VCID-a795-r67e-p3ck
5
vulnerability VCID-a84t-cjcb-tqcw
6
vulnerability VCID-f81v-9fv8-93cd
7
vulnerability VCID-fahk-eg3e-x7cu
8
vulnerability VCID-fbmd-b72k-f3dt
9
vulnerability VCID-j7d6-zp3s-67fq
10
vulnerability VCID-nx5d-r4jc-77df
11
vulnerability VCID-p167-yf3n-6qd5
12
vulnerability VCID-qd4u-smpr-auc1
13
vulnerability VCID-qd52-rbd7-qkbn
14
vulnerability VCID-rp33-97ps-7ufr
15
vulnerability VCID-w7f7-5frp-n3br
16
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.0.2
4
url pkg:npm/electron@8.0.3
purl pkg:npm/electron@8.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-9rnd-3aeh-g7hr
4
vulnerability VCID-a795-r67e-p3ck
5
vulnerability VCID-a84t-cjcb-tqcw
6
vulnerability VCID-f81v-9fv8-93cd
7
vulnerability VCID-fahk-eg3e-x7cu
8
vulnerability VCID-fbmd-b72k-f3dt
9
vulnerability VCID-j7d6-zp3s-67fq
10
vulnerability VCID-nx5d-r4jc-77df
11
vulnerability VCID-p167-yf3n-6qd5
12
vulnerability VCID-qd4u-smpr-auc1
13
vulnerability VCID-qd52-rbd7-qkbn
14
vulnerability VCID-rp33-97ps-7ufr
15
vulnerability VCID-w7f7-5frp-n3br
16
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.0.3
5
url pkg:npm/electron@8.1.0
purl pkg:npm/electron@8.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-9rnd-3aeh-g7hr
4
vulnerability VCID-a795-r67e-p3ck
5
vulnerability VCID-a84t-cjcb-tqcw
6
vulnerability VCID-f81v-9fv8-93cd
7
vulnerability VCID-fahk-eg3e-x7cu
8
vulnerability VCID-fbmd-b72k-f3dt
9
vulnerability VCID-j7d6-zp3s-67fq
10
vulnerability VCID-nx5d-r4jc-77df
11
vulnerability VCID-p167-yf3n-6qd5
12
vulnerability VCID-qd4u-smpr-auc1
13
vulnerability VCID-qd52-rbd7-qkbn
14
vulnerability VCID-rp33-97ps-7ufr
15
vulnerability VCID-w7f7-5frp-n3br
16
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.1.0
6
url pkg:npm/electron@8.1.1
purl pkg:npm/electron@8.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-9rnd-3aeh-g7hr
4
vulnerability VCID-a795-r67e-p3ck
5
vulnerability VCID-a84t-cjcb-tqcw
6
vulnerability VCID-f81v-9fv8-93cd
7
vulnerability VCID-fahk-eg3e-x7cu
8
vulnerability VCID-fbmd-b72k-f3dt
9
vulnerability VCID-j7d6-zp3s-67fq
10
vulnerability VCID-nx5d-r4jc-77df
11
vulnerability VCID-p167-yf3n-6qd5
12
vulnerability VCID-qd4u-smpr-auc1
13
vulnerability VCID-qd52-rbd7-qkbn
14
vulnerability VCID-rp33-97ps-7ufr
15
vulnerability VCID-w7f7-5frp-n3br
16
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.1.1
7
url pkg:npm/electron@8.2.0
purl pkg:npm/electron@8.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-9rnd-3aeh-g7hr
4
vulnerability VCID-a795-r67e-p3ck
5
vulnerability VCID-a84t-cjcb-tqcw
6
vulnerability VCID-f81v-9fv8-93cd
7
vulnerability VCID-fahk-eg3e-x7cu
8
vulnerability VCID-fbmd-b72k-f3dt
9
vulnerability VCID-j7d6-zp3s-67fq
10
vulnerability VCID-nx5d-r4jc-77df
11
vulnerability VCID-p167-yf3n-6qd5
12
vulnerability VCID-qd4u-smpr-auc1
13
vulnerability VCID-qd52-rbd7-qkbn
14
vulnerability VCID-rp33-97ps-7ufr
15
vulnerability VCID-w7f7-5frp-n3br
16
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.2.0
8
url pkg:npm/electron@8.2.1
purl pkg:npm/electron@8.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-9rnd-3aeh-g7hr
4
vulnerability VCID-a795-r67e-p3ck
5
vulnerability VCID-a84t-cjcb-tqcw
6
vulnerability VCID-f81v-9fv8-93cd
7
vulnerability VCID-fahk-eg3e-x7cu
8
vulnerability VCID-fbmd-b72k-f3dt
9
vulnerability VCID-j7d6-zp3s-67fq
10
vulnerability VCID-nx5d-r4jc-77df
11
vulnerability VCID-p167-yf3n-6qd5
12
vulnerability VCID-qd4u-smpr-auc1
13
vulnerability VCID-qd52-rbd7-qkbn
14
vulnerability VCID-rp33-97ps-7ufr
15
vulnerability VCID-w7f7-5frp-n3br
16
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.2.1
9
url pkg:npm/electron@8.2.2
purl pkg:npm/electron@8.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-9rnd-3aeh-g7hr
4
vulnerability VCID-a795-r67e-p3ck
5
vulnerability VCID-a84t-cjcb-tqcw
6
vulnerability VCID-f81v-9fv8-93cd
7
vulnerability VCID-fahk-eg3e-x7cu
8
vulnerability VCID-fbmd-b72k-f3dt
9
vulnerability VCID-j7d6-zp3s-67fq
10
vulnerability VCID-nx5d-r4jc-77df
11
vulnerability VCID-p167-yf3n-6qd5
12
vulnerability VCID-qd4u-smpr-auc1
13
vulnerability VCID-qd52-rbd7-qkbn
14
vulnerability VCID-rp33-97ps-7ufr
15
vulnerability VCID-w7f7-5frp-n3br
16
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.2.2
10
url pkg:npm/electron@8.2.3
purl pkg:npm/electron@8.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-9rnd-3aeh-g7hr
4
vulnerability VCID-a795-r67e-p3ck
5
vulnerability VCID-a84t-cjcb-tqcw
6
vulnerability VCID-f81v-9fv8-93cd
7
vulnerability VCID-fahk-eg3e-x7cu
8
vulnerability VCID-fbmd-b72k-f3dt
9
vulnerability VCID-j7d6-zp3s-67fq
10
vulnerability VCID-nx5d-r4jc-77df
11
vulnerability VCID-p167-yf3n-6qd5
12
vulnerability VCID-qd4u-smpr-auc1
13
vulnerability VCID-qd52-rbd7-qkbn
14
vulnerability VCID-rp33-97ps-7ufr
15
vulnerability VCID-w7f7-5frp-n3br
16
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.2.3
11
url pkg:npm/electron@8.2.4
purl pkg:npm/electron@8.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.2.4
12
url pkg:npm/electron@8.2.5
purl pkg:npm/electron@8.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.2.5
13
url pkg:npm/electron@8.3.0
purl pkg:npm/electron@8.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.3.0
14
url pkg:npm/electron@8.3.1
purl pkg:npm/electron@8.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.3.1
15
url pkg:npm/electron@8.3.2
purl pkg:npm/electron@8.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.3.2
16
url pkg:npm/electron@8.3.3
purl pkg:npm/electron@8.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.3.3
17
url pkg:npm/electron@8.3.4
purl pkg:npm/electron@8.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.3.4
18
url pkg:npm/electron@8.4.0
purl pkg:npm/electron@8.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.4.0
19
url pkg:npm/electron@8.4.1
purl pkg:npm/electron@8.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.4.1
20
url pkg:npm/electron@8.5.0
purl pkg:npm/electron@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@8.5.0
21
url pkg:npm/electron@9.0.0-beta.0
purl pkg:npm/electron@9.0.0-beta.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6pvc-cdyz-gkcv
1
vulnerability VCID-qd4u-smpr-auc1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@9.0.0-beta.0
22
url pkg:npm/electron@9.0.0
purl pkg:npm/electron@9.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-9rnd-3aeh-g7hr
4
vulnerability VCID-a795-r67e-p3ck
5
vulnerability VCID-a84t-cjcb-tqcw
6
vulnerability VCID-f81v-9fv8-93cd
7
vulnerability VCID-fahk-eg3e-x7cu
8
vulnerability VCID-fbmd-b72k-f3dt
9
vulnerability VCID-j7d6-zp3s-67fq
10
vulnerability VCID-nx5d-r4jc-77df
11
vulnerability VCID-p167-yf3n-6qd5
12
vulnerability VCID-qd4u-smpr-auc1
13
vulnerability VCID-qd52-rbd7-qkbn
14
vulnerability VCID-rp33-97ps-7ufr
15
vulnerability VCID-w7f7-5frp-n3br
16
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@9.0.0
23
url pkg:npm/electron@9.0.1
purl pkg:npm/electron@9.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@9.0.1
24
url pkg:npm/electron@9.0.2
purl pkg:npm/electron@9.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@9.0.2
25
url pkg:npm/electron@9.0.3
purl pkg:npm/electron@9.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@9.0.3
26
url pkg:npm/electron@9.0.4
purl pkg:npm/electron@9.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@9.0.4
27
url pkg:npm/electron@9.0.5
purl pkg:npm/electron@9.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@9.0.5
28
url pkg:npm/electron@9.1.0
purl pkg:npm/electron@9.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@9.1.0
29
url pkg:npm/electron@9.1.1
purl pkg:npm/electron@9.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@9.1.1
30
url pkg:npm/electron@9.1.2
purl pkg:npm/electron@9.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@9.1.2
31
url pkg:npm/electron@9.2.0
purl pkg:npm/electron@9.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@9.2.0
32
url pkg:npm/electron@9.2.1
purl pkg:npm/electron@9.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@9.2.1
33
url pkg:npm/electron@10.0.0-beta.0
purl pkg:npm/electron@10.0.0-beta.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6pvc-cdyz-gkcv
1
vulnerability VCID-qd4u-smpr-auc1
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@10.0.0-beta.0
34
url pkg:npm/electron@10.0.0
purl pkg:npm/electron@10.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1x44-uf31-1ydv
1
vulnerability VCID-6pvc-cdyz-gkcv
2
vulnerability VCID-7eu1-94qk-nuar
3
vulnerability VCID-a795-r67e-p3ck
4
vulnerability VCID-a84t-cjcb-tqcw
5
vulnerability VCID-f81v-9fv8-93cd
6
vulnerability VCID-j7d6-zp3s-67fq
7
vulnerability VCID-nx5d-r4jc-77df
8
vulnerability VCID-p167-yf3n-6qd5
9
vulnerability VCID-qd4u-smpr-auc1
10
vulnerability VCID-qd52-rbd7-qkbn
11
vulnerability VCID-w7f7-5frp-n3br
12
vulnerability VCID-xys1-xe1s-jqha
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/electron@10.0.0
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-15174
reference_id
reference_type
scores
0
value 0.00296
scoring_system epss
scoring_elements 0.5291
published_at 2026-04-21T12:55:00Z
1
value 0.00296
scoring_system epss
scoring_elements 0.52823
published_at 2026-04-02T12:55:00Z
2
value 0.00296
scoring_system epss
scoring_elements 0.5285
published_at 2026-04-04T12:55:00Z
3
value 0.00296
scoring_system epss
scoring_elements 0.52818
published_at 2026-04-07T12:55:00Z
4
value 0.00296
scoring_system epss
scoring_elements 0.52869
published_at 2026-04-08T12:55:00Z
5
value 0.00296
scoring_system epss
scoring_elements 0.52864
published_at 2026-04-09T12:55:00Z
6
value 0.00296
scoring_system epss
scoring_elements 0.52914
published_at 2026-04-11T12:55:00Z
7
value 0.00296
scoring_system epss
scoring_elements 0.52898
published_at 2026-04-12T12:55:00Z
8
value 0.00296
scoring_system epss
scoring_elements 0.52882
published_at 2026-04-13T12:55:00Z
9
value 0.00296
scoring_system epss
scoring_elements 0.5292
published_at 2026-04-16T12:55:00Z
10
value 0.00296
scoring_system epss
scoring_elements 0.52927
published_at 2026-04-18T12:55:00Z
11
value 0.00296
scoring_system epss
scoring_elements 0.528
published_at 2026-04-01T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-15174
1
reference_url https://github.com/electron/electron
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/electron/electron
2
reference_url https://github.com/electron/electron/commit/18613925610ba319da7f497b6deed85ad712c59b
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/electron/electron/commit/18613925610ba319da7f497b6deed85ad712c59b
3
reference_url https://github.com/electron/electron/security/advisories/GHSA-2q4g-w47c-4674
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:L
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/electron/electron/security/advisories/GHSA-2q4g-w47c-4674
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-15174
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-15174
5
reference_url https://github.com/advisories/GHSA-2q4g-w47c-4674
reference_id GHSA-2q4g-w47c-4674
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2q4g-w47c-4674
Weaknesses
0
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
1
cwe_id 693
name Protection Mechanism Failure
description The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
3
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-6pvc-cdyz-gkcv