Search for packages
Package details: pkg:npm/electron@11.0.0-beta.5
purl pkg:npm/electron@11.0.0-beta.5
Tags Ghost
Next non-vulnerable version 22.3.25
Latest non-vulnerable version 27.0.1
Risk 3.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-3kex-rv4x-aaam
Aliases:
CVE-2020-15215
GHSA-56pc-6jqp-xqj8
Exposure of Resource to Wrong Sphere Electron is vulnerable to a context isolation bypass. Apps using both `contextIsolation` and `sandbox: true` are affected. Apps using both `contextIsolation` and `nodeIntegrationInSubFrames: true` are affected. This is a context isolation bypass, meaning that code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions.
11.0.0-beta.6
Affected by 9 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2024-09-17T22:19:53.645820+00:00 GHSA Importer Affected by VCID-3kex-rv4x-aaam https://github.com/advisories/GHSA-56pc-6jqp-xqj8 34.0.1
2024-01-03T17:48:48.156075+00:00 GHSA Importer Affected by VCID-3kex-rv4x-aaam https://github.com/advisories/GHSA-56pc-6jqp-xqj8 34.0.0rc1