CVE-2018-1000118
1 advisory.
npm/electron CVE-2018-1000118: high 8.8
Electron protocol handler browser vulnerable to Command Injection
Action: Upgrade electron to 1.8.2-beta5 or later.
npm i electron@1.8.2-beta5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.2-beta5 | - |
Fixed versions
| 1.8.2-beta5 |
Sources
- osv: GHSA-fjqr-fx3f-g4rv
- https://nvd.nist.gov/vuln/detail/CVE-2018-1000118
- https://github.com/electron/electron/commit/ce361a12e355f9e1e99c989f1ea056c9e502dbe7
- https://electronjs.org/releases#1.8.2-beta.5
- https://github.com/advisories/GHSA-fjqr-fx3f-g4rv
CVE-2018-1000118 · published · modified · JSON