Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/electron@11.0.4-1
purl pkg:alpm/archlinux/electron@11.0.4-1
Next non-vulnerable version 11.1.0-1
Latest non-vulnerable version 11.1.0-1
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-1x44-uf31-1ydv
Aliases:
CVE-2020-26272
GHSA-hvf8-h2qh-37m9
IPC messages delivered to the wrong frame in Electron ### Impact IPC messages sent from the main process to a subframe in the renderer process, through `webContents.sendToFrame`, `event.reply` or when using the `remote` module, can in some cases be delivered to the wrong frame. If your app does ANY of the following, then it is impacted by this issue: - Uses `remote` - Calls `webContents.sendToFrame` - Calls `event.reply` in an IPC message handler ### Patches This has been fixed in the following versions: - 9.4.0 - 10.2.0 - 11.1.0 - 12.0.0-beta.9 ### Workarounds There are no workarounds for this issue. ### For more information If you have any questions or comments about this advisory, email us at [security@electronjs.org](mailto:security@electronjs.org).
11.1.0-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:26:55.913615+00:00 Arch Linux Importer Affected by VCID-1x44-uf31-1ydv https://security.archlinux.org/AVG-1503 38.0.0