npm/electron CVE-2017-1000424: medium 4.3, EPSS 0.98%
Electron vulnerable to URL spoofing via PDFium
Action: Upgrade electron to 1.7.6 or later.
npm i electron@1.7.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.7.0 | 1.7.6 | - |
Fixed versions
| 1.7.6 |
Sources
- osv: GHSA-6h98-cf9g-vmg2
- https://nvd.nist.gov/vuln/detail/CVE-2017-1000424
- https://github.com/electron/electron/pull/10008
- https://github.com/electron/electron/pull/10008/files
- https://github.com/electron/electron
- https://github.com/electron/electron/releases/tag/v1.7.6
CVE-2017-1000424 · published · modified · JSON