CVE-2018-1000136: Code Execution by Re-enabling Node.js integration

March 23, 2018 (updated October 3, 2019)

Electron contains an improper handling of values vulnerability in Webviews that can result in remote code execution. .

References

electronjs.org/blog/webview-fix
nvd.nist.gov/vuln/detail/CVE-2018-1000136
www.electronjs.org/blog/webview-fix

Code Behaviors & Features

Detect and mitigate CVE-2018-1000136 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →