Search for packages
| purl | pkg:npm/electron@9.0.6 |
| Tags | Ghost |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3kex-rv4x-aaam
Aliases: CVE-2020-15215 GHSA-56pc-6jqp-xqj8 |
Exposure of Resource to Wrong Sphere Electron is vulnerable to a context isolation bypass. Apps using both `contextIsolation` and `sandbox: true` are affected. Apps using both `contextIsolation` and `nodeIntegrationInSubFrames: true` are affected. This is a context isolation bypass, meaning that code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions. |
Affected by 10 other vulnerabilities. Affected by 10 other vulnerabilities. Affected by 9 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2024-09-17T22:44:59.648631+00:00 | GitLab Importer | Affected by | VCID-3kex-rv4x-aaam | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/electron/CVE-2020-15215.yml | 34.0.1 |
| 2024-01-03T18:06:34.533702+00:00 | GitLab Importer | Affected by | VCID-3kex-rv4x-aaam | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/electron/CVE-2020-15215.yml | 34.0.0rc1 |