electron Security Advisories - Npm | Ecosyste.ms: Advisories

electron

Build cross platform desktop apps with JavaScript, HTML, and CSS

View on github.com · View on npmjs.org

Moderate Security Advisories for electron in npm Clear Filters

Moderate

2 months ago

Electron has ASAR Integrity Bypass via resource modification GSA_kwCzR0hTQS12bXF2LWh4OHEtajdtZ84ABLov

npm electron

Moderate

4 months ago

Electron vulnerable to Heap Buffer Overflow in NativeImage GSA_kwCzR0hTQS02cjJ4LThwcTgtOTQ4Oc4ABJkx

npm electron

Moderate

almost 2 years ago

ASAR Integrity bypass via filetype confusion in electron GSA_kwCzR0hTQS03bTQ4LXdjOTMtOWc4Nc4AA3e-

npm electron

Moderate

about 2 years ago

Electron vulnerable to out-of-package code execution when launched with arbitrary cwd GSA_kwCzR0hTQS03eDk3LWozNzMtODV4Nc4AA1vg

npm electron

Moderate

about 2 years ago

Electron context isolation bypass via nested unserializable return value GSA_kwCzR0hTQS1wN3YyLXA5bTgtcXFnN84AA1vf

npm electron

Moderate

almost 3 years ago

Exfiltration of hashed SMB credentials on Windows via file:// redirect GSA_kwCzR0hTQS1wMmpoLTQ0cWotcGYyds4AAvz_

npm electron

Moderate

over 3 years ago

AutoUpdater module fails to validate certain nested components of the bundle GSA_kwCzR0hTQS03N3hjLWhqdjgtd3c5N84AArqt

npm electron

Moderate

over 3 years ago

Electron vulnerable to URL spoofing via PDFium GSA_kwCzR0hTQS02aDk4LWNmOWctdm1nMs4AAR20

npm Electron

Moderate

about 4 years ago

Electron's sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API GSA_kwCzR0hTQS1tcGptLXY5OTctYzRoNM0WiQ

npm electron

Moderate

almost 5 years ago

IPC messages delivered to the wrong frame in Electron MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWh2ZjgtaDJxaC0zN205

npm electron

Moderate

over 5 years ago

Arbitrary file read via window-open IPC in Electron MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWY5bXEtanBoNi05bWht

npm electron

Filter by Severity

High 13 Moderate 11 Low 4 Critical 2