Medium
Security advisory
The Electron framework lets users write cross-platform desktop applications using JavaScript, HTML and CSS. In versions of Electron IPC prior to 9.4.0, 10.2.0, 11.1.0, and 12.0.0-beta.9, messages sent from the main process to a subframe in the renderer process, through webContents.sendToFrame, event.reply or when using the remote module, can in some cases be delivered to the wrong frame. If your app uses remote, calls webContents.sendToFrame, or calls event.reply in an IPC message handler then it is impacted by this issue. This has been fixed in versions 9.4.0, 10.2.0, 11.1.0, and 12.0.0-beta.9. There are no known workarounds for this issue.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2020-26272
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:38 UTC · Revision 1
Source evidence
The Electron framework lets users write cross-platform desktop applications using JavaScript, HTML and CSS. In versions of Electron IPC prior to 9.4.0, 10.2.0, 11.1.0, and 12.0.0-beta.9, messages sent from the main process to a subframe in the renderer process, through webContents.sendToFrame, event.reply or when using the remote module, can in some cases be delivered to the wrong frame. If your app uses remote, calls webContents.sendToFrame, or calls event.reply in an IPC message handler then it is impacted by this issue. This has been fixed in versions 9.4.0, 10.2.0, 11.1.0, and 12.0.0-beta.9. There are no known workarounds for this issue.
osv:CVE-2020-26272
Complete source record
{
"id": "f7431027b28eece6d9371acf285a10d100cab50c68c17ca4312a0a9991e4604e",
"url": "https://osv.dev/vulnerability/CVE-2020-26272",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2020-26272",
"summary": "The Electron framework lets users write cross-platform desktop applications using JavaScript, HTML and CSS. In versions of Electron IPC prior to 9.4.0, 10.2.0, 11.1.0, and 12.0.0-beta.9, messages sent from the main process to a subframe in the renderer process, through webContents.sendToFrame, event.reply or when using the remote module, can in some cases be delivered to the wrong frame. If your app uses remote, calls webContents.sendToFrame, or calls event.reply in an IPC message handler then it is impacted by this issue. This has been fixed in versions 9.4.0, 10.2.0, 11.1.0, and 12.0.0-beta.9. There are no known workarounds for this issue.",
"evidence": "osv:CVE-2020-26272",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2020-26272",
"aliases": [
"CVE-2020-26272",
"GHSA-hvf8-h2qh-37m9"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/electron/electron",
"type": "GIT",
"events": [
{
"introduced": "4da01641ce50cf5a8b6f39717e4c447f89455dfa"
},
{
"fixed": "f37c1ff6443f2ef6cd946886c735533bf6260c19"
},
{
"introduced": "c5b5ca50a67a237700f649adccf163f0b9aad0c5"
},
{
"fixed": "4594af595eab12e76034d0d0e94539ef390024bb"
},
{
"introduced": "387a15f5829f623c9366d0a4625cc33f5a4758d4"
},
{
"fixed": "101a2282ab3ae030ace05e70043739386c24b3cb"
},
{
"fixed": "07a1c2a3e5845901f7e2eda9506695be58edc73c"
},
{
"fixed": "0bbd268eb4caf35604443df5ff196980dd49e208"
},
{
"fixed": "36c695ce2a7e22c07fe1e30c61c00d20371daee2"
},
{
"fixed": "429400040ecb16a21d19936658579e65a797e4cc"
},
{
"fixed": "5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:electronjs:electron:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.0.0"
},
{
"fixed": "9.4.0"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:electronjs:electron:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.0.0"
},
{
"fixed": "10.2.0"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:electronjs:electron:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "11.0.0"
},
{
"fixed": "11.1.0"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "07a1c2a3e5845901f7e2eda9506695be58edc73c"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "0bbd268eb4caf35604443df5ff196980dd49e208"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "36c695ce2a7e22c07fe1e30c61c00d20371daee2"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "429400040ecb16a21d19936658579e65a797e4cc"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "f37c1ff6443f2ef6cd946886c735533bf6260c19"
}
],
"source": "REFERENCES_TAG",
"original_tag": "v9.4.0"
}
]
}
}
],
"versions": [
"v11.0.5",
"v10.1.7",
"v11.0.4",
"v9.3.5",
"v11.0.3",
"v11.0.2",
"v10.1.6",
"v11.0.1",
"v11.0.0",
"v9.3.4",
"v9.3.3",
"v10.1.5",
"v10.1.4",
"v9.3.2",
"v10.1.3",
"v9.3.1",
"v10.1.2",
"v9.3.0",
"v10.1.1",
"v10.1.0",
"v10.0.1",
"v10.0.0",
"v9.2.1",
"v9.2.0",
"v9.1.2",
"v9.1.1",
"v9.1.0",
"v9.0.6",
"v9.0.5",
"v9.0.4",
"v9.0.3",
"v9.0.2",
"v9.0.1",
"v9.0.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-26272.json",
"vanir_signatures": [
{
"id": "CVE-2020-26272-04e82f0c",
"digest": {
"threshold": 0.9,
"line_hashes": [
"313032440630604907223703712367315031497",
"83197735551558352911174960639675331891",
"262455343727397153432625609602267453818",
"147742664690478424494676506633580142686",
"117244084029845088249232771183968328361",
"103401991121920233803149889087050468015",
"183123773462621202266894728999170444351",
"147742664690478424494676506633580142686",
"185174950397666370123716889882210309977",
"110054631361664851758590526695117882308",
"88369396556858057782605083516530217270",
"83554369435245901066597023302882475732"
]
},
"source": "https://github.com/electron/electron/commit/0bbd268eb4caf35604443df5ff196980dd49e208",
"target": {
"file": "shell/common/api/remote/remote_callback_freer.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-0841a569",
"digest": {
"threshold": 0.9,
"line_hashes": [
"313032440630604907223703712367315031497",
"83197735551558352911174960639675331891",
"262455343727397153432625609602267453818",
"147742664690478424494676506633580142686",
"117244084029845088249232771183968328361",
"103401991121920233803149889087050468015",
"183123773462621202266894728999170444351",
"147742664690478424494676506633580142686",
"185174950397666370123716889882210309977",
"110054631361664851758590526695117882308",
"88369396556858057782605083516530217270",
"83554369435245901066597023302882475732"
]
},
"source": "https://github.com/electron/electron/commit/5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd",
"target": {
"file": "shell/common/api/remote/remote_callback_freer.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-14cbf949",
"digest": {
"threshold": 0.9,
"line_hashes": [
"245984452434646337200063399336997769655",
"132475682388429538998910461779838567299",
"181795265450562538829351116307706265918",
"183474686773543786798413565345237138256",
"65061730555892512890488248059829659862",
"179966689541382938445925330339670496392",
"104157118008051671957768437988763371346"
]
},
"source": "https://github.com/electron/electron/commit/07a1c2a3e5845901f7e2eda9506695be58edc73c",
"target": {
"file": "shell/common/gin_helper/event_emitter.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-1838074a",
"digest": {
"threshold": 0.9,
"line_hashes": [
"287205841254502126395013713886078832934",
"142898809094716955430341410026077155259",
"15439720782795250393735098077939218399",
"182950242858280576171103341694523513130",
"5876225114195792717144737006117293343",
"223290068118242090994011858547218091545",
"236632885221594991751031321296683685587",
"206214436811680868532001440442209278227",
"178641189899975236565140470433134671115",
"2508836763789185739556126658258170977",
"246033333725504385989276433967000175798",
"102290467538447217642659619127202112389",
"318062980058434488377787339922332087419",
"296451280269323490138728269617060190838",
"256060359665179448562459742671970585680",
"295845677708379514334721721017657725002",
"301725277742181896432511116192743128019"
]
},
"source": "https://github.com/electron/electron/commit/5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd",
"target": {
"file": "shell/browser/api/electron_api_web_contents.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-19cf83ae",
"digest": {
"threshold": 0.9,
"line_hashes": [
"259626012671428820934679576571791564272",
"190888827895443283507189164906074420513",
"140114056141223143105956523774720280216",
"323984724206437864177961710133179841237"
]
},
"source": "https://github.com/electron/electron/commit/0bbd268eb4caf35604443df5ff196980dd49e208",
"target": {
"file": "shell/browser/api/electron_api_web_contents.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-24e86639",
"digest": {
"threshold": 0.9,
"line_hashes": [
"286546095561722849304899761614243606370",
"18594053933147830935146762621454189881",
"231744994441500991232230753212301907421",
"147742664690478424494676506633580142686",
"225478983946948299042794069263406854697",
"155908254062235301081122339545368807131",
"113263493416511065577179012511659304799",
"33770344712824465416138643710495897284",
"65467732814744102592409384208054786610",
"50465836792174489854299633506672120570",
"156228786641059252339118863713545955313",
"58034794325934109090949819898393575455",
"147742664690478424494676506633580142686",
"62473832892499251564086550250572886934",
"268875754937602499414675415335897911256",
"82413767142776151616339699397539184835",
"326328112980054107830867134204970401986",
"337799738599541814054532293596149286346",
"332440534599940154327226532152897528635",
"132554946538616583053448283770668316321",
"219414745585961351299723657212182395995",
"121202287163674045107233119935464359180",
"78589303759395228020773884345992410259",
"276741656170477293699742489778032574516",
"232976832141171976369752706427772500095",
"293955162568213765605321527794583283599",
"127370560358776926474583449499664163330",
"254610680437732091224903217537865617309",
"20363517208715894320276692211536556011",
"236238828480783366741635939204395195924",
"184631512299303109827892524831286415373"
]
},
"source": "https://github.com/electron/electron/commit/0bbd268eb4caf35604443df5ff196980dd49e208",
"target": {
"file": "shell/common/api/remote/remote_callback_freer.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-28568229",
"digest": {
"threshold": 0.9,
"line_hashes": [
"259626012671428820934679576571791564272",
"190888827895443283507189164906074420513",
"140114056141223143105956523774720280216",
"323984724206437864177961710133179841237"
]
},
"source": "https://github.com/electron/electron/commit/36c695ce2a7e22c07fe1e30c61c00d20371daee2",
"target": {
"file": "shell/browser/api/electron_api_web_contents.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-30546e15",
"digest": {
"threshold": 0.9,
"line_hashes": [
"245984452434646337200063399336997769655",
"132475682388429538998910461779838567299",
"181795265450562538829351116307706265918",
"183474686773543786798413565345237138256",
"65061730555892512890488248059829659862",
"179966689541382938445925330339670496392",
"104157118008051671957768437988763371346"
]
},
"source": "https://github.com/electron/electron/commit/5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd",
"target": {
"file": "shell/common/gin_helper/event_emitter.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-5c372b63",
"digest": {
"threshold": 0.9,
"line_hashes": [
"259626012671428820934679576571791564272",
"190888827895443283507189164906074420513",
"140114056141223143105956523774720280216",
"323984724206437864177961710133179841237"
]
},
"source": "https://github.com/electron/electron/commit/429400040ecb16a21d19936658579e65a797e4cc",
"target": {
"file": "shell/browser/api/electron_api_web_contents.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-77e39721",
"digest": {
"length": 576,
"function_hash": "213465454861229333496615410510581771599"
},
"source": "https://github.com/electron/electron/commit/0bbd268eb4caf35604443df5ff196980dd49e208",
"target": {
"file": "shell/common/api/remote/remote_callback_freer.cc",
"function": "RemoteCallbackFreer::RunDestructor"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-8487b6c8",
"digest": {
"threshold": 0.9,
"line_hashes": [
"245984452434646337200063399336997769655",
"132475682388429538998910461779838567299",
"181795265450562538829351116307706265918",
"183474686773543786798413565345237138256",
"65061730555892512890488248059829659862",
"179966689541382938445925330339670496392",
"104157118008051671957768437988763371346"
]
},
"source": "https://github.com/electron/electron/commit/429400040ecb16a21d19936658579e65a797e4cc",
"target": {
"file": "shell/common/gin_helper/event_emitter.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-88bc5f8d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"286546095561722849304899761614243606370",
"18594053933147830935146762621454189881",
"231744994441500991232230753212301907421",
"147742664690478424494676506633580142686",
"225478983946948299042794069263406854697",
"155908254062235301081122339545368807131",
"113263493416511065577179012511659304799",
"33770344712824465416138643710495897284",
"65467732814744102592409384208054786610",
"50465836792174489854299633506672120570",
"156228786641059252339118863713545955313",
"58034794325934109090949819898393575455",
"147742664690478424494676506633580142686",
"62473832892499251564086550250572886934",
"268875754937602499414675415335897911256",
"82413767142776151616339699397539184835",
"326328112980054107830867134204970401986",
"337799738599541814054532293596149286346",
"332440534599940154327226532152897528635",
"132554946538616583053448283770668316321",
"219414745585961351299723657212182395995",
"121202287163674045107233119935464359180",
"78589303759395228020773884345992410259",
"276741656170477293699742489778032574516",
"232976832141171976369752706427772500095",
"293955162568213765605321527794583283599",
"127370560358776926474583449499664163330",
"254610680437732091224903217537865617309",
"20363517208715894320276692211536556011",
"236238828480783366741635939204395195924",
"184631512299303109827892524831286415373"
]
},
"source": "https://github.com/electron/electron/commit/5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd",
"target": {
"file": "shell/common/api/remote/remote_callback_freer.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-a1de8ade",
"digest": {
"threshold": 0.9,
"line_hashes": [
"16023040936284061033740414276037819986",
"261015332494660348124059935672633569702",
"252396433010161011977279938552784780172",
"323984724206437864177961710133179841237"
]
},
"source": "https://github.com/electron/electron/commit/07a1c2a3e5845901f7e2eda9506695be58edc73c",
"target": {
"file": "shell/browser/api/electron_api_web_contents.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-a55e3956",
"digest": {
"threshold": 0.9,
"line_hashes": [
"287205841254502126395013713886078832934",
"142898809094716955430341410026077155259",
"15439720782795250393735098077939218399",
"182950242858280576171103341694523513130",
"5876225114195792717144737006117293343",
"223290068118242090994011858547218091545",
"236632885221594991751031321296683685587",
"206214436811680868532001440442209278227",
"178641189899975236565140470433134671115",
"2508836763789185739556126658258170977",
"246033333725504385989276433967000175798",
"102290467538447217642659619127202112389",
"318062980058434488377787339922332087419",
"296451280269323490138728269617060190838",
"256060359665179448562459742671970585680",
"295845677708379514334721721017657725002",
"301725277742181896432511116192743128019"
]
},
"source": "https://github.com/electron/electron/commit/0bbd268eb4caf35604443df5ff196980dd49e208",
"target": {
"file": "shell/browser/api/electron_api_web_contents.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-acb847cf",
"digest": {
"threshold": 0.9,
"line_hashes": [
"245984452434646337200063399336997769655",
"132475682388429538998910461779838567299",
"181795265450562538829351116307706265918",
"183474686773543786798413565345237138256",
"65061730555892512890488248059829659862",
"179966689541382938445925330339670496392",
"104157118008051671957768437988763371346"
]
},
"source": "https://github.com/electron/electron/commit/0bbd268eb4caf35604443df5ff196980dd49e208",
"target": {
"file": "shell/common/gin_helper/event_emitter.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-bb1a7427",
"digest": {
"length": 576,
"function_hash": "213465454861229333496615410510581771599"
},
"source": "https://github.com/electron/electron/commit/5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd",
"target": {
"file": "shell/common/api/remote/remote_callback_freer.cc",
"function": "RemoteCallbackFreer::RunDestructor"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-bd0a0966",
"digest": {
"threshold": 0.9,
"line_hashes": [
"245984452434646337200063399336997769655",
"132475682388429538998910461779838567299",
"181795265450562538829351116307706265918",
"183474686773543786798413565345237138256",
"65061730555892512890488248059829659862",
"179966689541382938445925330339670496392",
"104157118008051671957768437988763371346"
]
},
"source": "https://github.com/electron/electron/commit/36c695ce2a7e22c07fe1e30c61c00d20371daee2",
"target": {
"file": "shell/common/gin_helper/event_emitter.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-d814d793",
"digest": {
"threshold": 0.9,
"line_hashes": [
"287205841254502126395013713886078832934",
"142898809094716955430341410026077155259",
"15439720782795250393735098077939218399",
"153759453852004843131803498537909663200",
"219031189397780464877209732934955614333",
"223290068118242090994011858547218091545",
"236632885221594991751031321296683685587",
"206214436811680868532001440442209278227",
"178641189899975236565140470433134671115",
"2508836763789185739556126658258170977",
"246033333725504385989276433967000175798",
"102290467538447217642659619127202112389",
"318062980058434488377787339922332087419",
"296451280269323490138728269617060190838",
"256060359665179448562459742671970585680",
"295845677708379514334721721017657725002",
"301725277742181896432511116192743128019"
]
},
"source": "https://github.com/electron/electron/commit/36c695ce2a7e22c07fe1e30c61c00d20371daee2",
"target": {
"file": "shell/browser/api/electron_api_web_contents.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-e0c806e8",
"digest": {
"threshold": 0.9,
"line_hashes": [
"259626012671428820934679576571791564272",
"190888827895443283507189164906074420513",
"140114056141223143105956523774720280216",
"323984724206437864177961710133179841237"
]
},
"source": "https://github.com/electron/electron/commit/5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd",
"target": {
"file": "shell/browser/api/electron_api_web_contents.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-e21c650f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"106505602959973383940994886937260803597",
"235996486376174733981178229482520875689",
"173302040137704966800277636069628800380",
"153759453852004843131803498537909663200",
"219031189397780464877209732934955614333",
"223290068118242090994011858547218091545",
"236632885221594991751031321296683685587",
"206214436811680868532001440442209278227",
"178641189899975236565140470433134671115",
"2508836763789185739556126658258170977",
"246033333725504385989276433967000175798",
"102290467538447217642659619127202112389",
"318062980058434488377787339922332087419",
"296451280269323490138728269617060190838",
"55404362077133348940758015694065464844",
"204093587208131812488658372570920700381",
"247419182561815150224337625135513180335"
]
},
"source": "https://github.com/electron/electron/commit/07a1c2a3e5845901f7e2eda9506695be58edc73c",
"target": {
"file": "shell/browser/api/electron_api_web_contents.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-26272-ec7ded07",
"digest": {
"threshold": 0.9,
"line_hashes": [
"287205841254502126395013713886078832934",
"142898809094716955430341410026077155259",
"15439720782795250393735098077939218399",
"153759453852004843131803498537909663200",
"219031189397780464877209732934955614333",
"223290068118242090994011858547218091545",
"236632885221594991751031321296683685587",
"206214436811680868532001440442209278227",
"178641189899975236565140470433134671115",
"2508836763789185739556126658258170977",
"246033333725504385989276433967000175798",
"102290467538447217642659619127202112389",
"318062980058434488377787339922332087419",
"296451280269323490138728269617060190838",
"256060359665179448562459742671970585680",
"295845677708379514334721721017657725002",
"301725277742181896432511116192743128019"
]
},
"source": "https://github.com/electron/electron/commit/429400040ecb16a21d19936658579e65a797e4cc",
"target": {
"file": "shell/browser/api/electron_api_web_contents.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T14:08:50Z"
}
}
],
"modified": "2026-10-20T14:08:50.090428231Z",
"provider": "osv",
"references": [
"https://github.com/electron/electron/pull/26875",
"https://github.com/electron/electron/releases/tag/v9.4.0",
"https://github.com/electron/electron/security/advisories/GHSA-hvf8-h2qh-37m9",
"https://www.electronjs.org/releases/stable?version=9#9.4.0",
"https://github.com/electron/electron/commit/07a1c2a3e5845901f7e2eda9506695be58edc73c",
"https://github.com/electron/electron/commit/0bbd268eb4caf35604443df5ff196980dd49e208",
"https://github.com/electron/electron/commit/36c695ce2a7e22c07fe1e30c61c00d20371daee2",
"https://github.com/electron/electron/commit/429400040ecb16a21d19936658579e65a797e4cc",
"https://github.com/electron/electron/commit/5c8e7e8b7f485ceafa8b271086d7b87e1de9dedd"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:electronjs:electron:10.0.0:beta10:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta11:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta12:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta13:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta14:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta15:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta17:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta19:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta1:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta20:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta21:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta23:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta24:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta25:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta2:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta3:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta4:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta5:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta6:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta7:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta8:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:10.0.0:beta9:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta10:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta11:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta12:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta13:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta14:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta15:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta16:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta17:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta18:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta19:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta1:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta20:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta21:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta22:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta23:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta3:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta4:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta5:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta6:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta7:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta8:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:11.0.0:beta9:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:12.0.0:beta1:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:12.0.0:beta3:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:12.0.0:beta4:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:12.0.0:beta5:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:12.0.0:beta6:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:12.0.0:beta7:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:12.0.0:beta8:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:12.0.0:beta9:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta10:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta11:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta12:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta13:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta14:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta15:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta16:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta17:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta18:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta19:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta1:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta20:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta21:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta22:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta23:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta24:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta2:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta3:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta4:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta5:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta6:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta7:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta8:*:*:*:*:*:*",
"cpe:2.3:a:electronjs:electron:9.0.0:beta9:*:*:*:*:*:*"
],
"vendor_product": "electronjs:electron",
"extracted_events": [
{
"range": [
{
"introduced": "9.0.0-beta1"
},
{
"last_affected": "9.0.0-beta1"
},
{
"introduced": "9.0.0-beta10"
},
{
"last_affected": "9.0.0-beta10"
},
{
"introduced": "9.0.0-beta11"
},
{
"last_affected": "9.0.0-beta11"
},
{
"introduced": "9.0.0-beta12"
},
{
"last_affected": "9.0.0-beta12"
},
{
"introduced": "9.0.0-beta13"
},
{
"last_affected": "9.0.0-beta13"
},
{
"introduced": "9.0.0-beta14"
},
{
"last_affected": "9.0.0-beta14"
},
{
"introduced": "9.0.0-beta15"
},
{
"last_affected": "9.0.0-beta15"
},
{
"introduced": "9.0.0-beta16"
},
{
"last_affected": "9.0.0-beta16"
},
{
"introduced": "9.0.0-beta17"
},
{
"last_affected": "9.0.0-beta17"
},
{
"introduced": "9.0.0-beta18"
},
{
"last_affected": "9.0.0-beta18"
},
{
"introduced": "9.0.0-beta19"
},
{
"last_affected": "9.0.0-beta19"
},
{
"introduced": "9.0.0-beta2"
},
{
"last_affected": "9.0.0-beta2"
},
{
"introduced": "9.0.0-beta20"
},
{
"last_affected": "9.0.0-beta20"
},
{
"introduced": "9.0.0-beta21"
},
{
"last_affected": "9.0.0-beta21"
},
{
"introduced": "9.0.0-beta22"
},
{
"last_affected": "9.0.0-beta22"
},
{
"introduced": "9.0.0-beta23"
},
{
"last_affected": "9.0.0-beta23"
},
{
"introduced": "9.0.0-beta24"
},
{
"last_affected": "9.0.0-beta24"
},
{
"introduced": "9.0.0-beta3"
},
{
"last_affected": "9.0.0-beta3"
},
{
"introduced": "9.0.0-beta4"
},
{
"last_affected": "9.0.0-beta4"
},
{
"introduced": "9.0.0-beta5"
},
{
"last_affected": "9.0.0-beta5"
},
{
"introduced": "9.0.0-beta6"
},
{
"last_affected": "9.0.0-beta6"
},
{
"introduced": "9.0.0-beta7"
},
{
"last_affected": "9.0.0-beta7"
},
{
"introduced": "9.0.0-beta8"
},
{
"last_affected": "9.0.0-beta8"
},
{
"introduced": "9.0.0-beta9"
},
{
"last_affected": "9.0.0-beta9"
},
{
"introduced": "10.0.0-beta1"
},
{
"last_affected": "10.0.0-beta1"
},
{
"introduced": "10.0.0-beta10"
},
{
"last_affected": "10.0.0-beta10"
},
{
"introduced": "10.0.0-beta11"
},
{
"last_affected": "10.0.0-beta11"
},
{
"introduced": "10.0.0-beta12"
},
{
"last_affected": "10.0.0-beta12"
},
{
"introduced": "10.0.0-beta13"
},
{
"last_affected": "10.0.0-beta13"
},
{
"introduced": "10.0.0-beta14"
},
{
"last_affected": "10.0.0-beta14"
},
{
"introduced": "10.0.0-beta15"
},
{
"last_affected": "10.0.0-beta15"
},
{
"introduced": "10.0.0-beta17"
},
{
"last_affected": "10.0.0-beta17"
},
{
"introduced": "10.0.0-beta19"
},
{
"last_affected": "10.0.0-beta19"
},
{
"introduced": "10.0.0-beta2"
},
{
"last_affected": "10.0.0-beta2"
},
{
"introduced": "10.0.0-beta20"
},
{
"last_affected": "10.0.0-beta20"
},
{
"introduced": "10.0.0-beta21"
},
{
"last_affected": "10.0.0-beta21"
},
{
"introduced": "10.0.0-beta23"
},
{
"last_affected": "10.0.0-beta23"
},
{
"introduced": "10.0.0-beta24"
},
{
"last_affected": "10.0.0-beta24"
},
{
"introduced": "10.0.0-beta25"
},
{
"last_affected": "10.0.0-beta25"
},
{
"introduced": "10.0.0-beta3"
},
{
"last_affected": "10.0.0-beta3"
},
{
"introduced": "10.0.0-beta4"
},
{
"last_affected": "10.0.0-beta4"
},
{
"introduced": "10.0.0-beta5"
},
{
"last_affected": "10.0.0-beta5"
},
{
"introduced": "10.0.0-beta6"
},
{
"last_affected": "10.0.0-beta6"
},
{
"introduced": "10.0.0-beta7"
},
{
"last_affected": "10.0.0-beta7"
},
{
"introduced": "10.0.0-beta8"
},
{
"last_affected": "10.0.0-beta8"
},
{
"introduced": "10.0.0-beta9"
},
{
"last_affected": "10.0.0-beta9"
},
{
"introduced": "11.0.0-beta1"
},
{
"last_affected": "11.0.0-beta1"
},
{
"introduced": "11.0.0-beta10"
},
{
"last_affected": "11.0.0-beta10"
},
{
"introduced": "11.0.0-beta11"
},
{
"last_affected": "11.0.0-beta11"
},
{
"introduced": "11.0.0-beta12"
},
{
"last_affected": "11.0.0-beta12"
},
{
"introduced": "11.0.0-beta13"
},
{
"last_affected": "11.0.0-beta13"
},
{
"introduced": "11.0.0-beta14"
},
{
"last_affected": "11.0.0-beta14"
},
{
"introduced": "11.0.0-beta15"
},
{
"last_affected": "11.0.0-beta15"
},
{
"introduced": "11.0.0-beta16"
},
{
"last_affected": "11.0.0-beta16"
},
{
"introduced": "11.0.0-beta17"
},
{
"last_affected": "11.0.0-beta17"
},
{
"introduced": "11.0.0-beta18"
},
{
"last_affected": "11.0.0-beta18"
},
{
"introduced": "11.0.0-beta19"
},
{
"last_affected": "11.0.0-beta19"
},
{
"introduced": "11.0.0-beta20"
},
{
"last_affected": "11.0.0-beta20"
},
{
"introduced": "11.0.0-beta21"
},
{
"last_affected": "11.0.0-beta21"
},
{
"introduced": "11.0.0-beta22"
},
{
"last_affected": "11.0.0-beta22"
},
{
"introduced": "11.0.0-beta23"
},
{
"last_affected": "11.0.0-beta23"
},
{
"introduced": "11.0.0-beta3"
},
{
"last_affected": "11.0.0-beta3"
},
{
"introduced": "11.0.0-beta4"
},
{
"last_affected": "11.0.0-beta4"
},
{
"introduced": "11.0.0-beta5"
},
{
"last_affected": "11.0.0-beta5"
},
{
"introduced": "11.0.0-beta6"
},
{
"last_affected": "11.0.0-beta6"
},
{
"introduced": "11.0.0-beta7"
},
{
"last_affected": "11.0.0-beta7"
},
{
"introduced": "11.0.0-beta8"
},
{
"last_affected": "11.0.0-beta8"
},
{
"introduced": "11.0.0-beta9"
},
{
"last_affected": "11.0.0-beta9"
},
{
"introduced": "12.0.0-beta1"
},
{
"last_affected": "12.0.0-beta1"
},
{
"introduced": "12.0.0-beta3"
},
{
"last_affected": "12.0.0-beta3"
},
{
"introduced": "12.0.0-beta4"
},
{
"last_affected": "12.0.0-beta4"
},
{
"introduced": "12.0.0-beta5"
},
{
"last_affected": "12.0.0-beta5"
},
{
"introduced": "12.0.0-beta6"
},
{
"last_affected": "12.0.0-beta6"
},
{
"introduced": "12.0.0-beta7"
},
{
"last_affected": "12.0.0-beta7"
},
{
"introduced": "12.0.0-beta8"
},
{
"last_affected": "12.0.0-beta8"
},
{
"introduced": "12.0.0-beta9"
},
{
"last_affected": "12.0.0-beta9"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2020-26272",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 388582,
"published_at": "2021-01-28T19:15:13.003+00:00"
}