Search for packages
Package details: pkg:npm/electron@1.8.2-beta4
purl pkg:npm/electron@1.8.2-beta4
Tags Ghost
Next non-vulnerable version 28.3.2
Latest non-vulnerable version 38.0.0-beta.6
Risk 4.2
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-msfx-94qn-f7eh
Aliases:
CVE-2018-1000118
GHSA-fjqr-fx3f-g4rv
Electron protocol handler browser vulnerable to Command Injection Github Electron version Electron 1.8.2-beta.4 and earlier contains a Command Injection vulnerability in Protocol Handler that can result in command execute. This attack appear to be exploitable via the victim opening an electron protocol handler in their browser. This vulnerability appears to have been fixed in Electron 1.8.2-beta.5. This issue is due to an incomplete fix for CVE-2018-1000006, specifically the black list used was not case insensitive allowing an attacker to potentially bypass it.
1.8.2-beta5
Affected by 0 other vulnerabilities.
1.8.2
Affected by 13 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-31T12:27:13.221470+00:00 GHSA Importer Affected by VCID-msfx-94qn-f7eh https://github.com/advisories/GHSA-fjqr-fx3f-g4rv 37.0.0