Security Bulletin: MongoDB Enterprised Advanced affected by: Exposure of Resource to Wrong Sphere and NULL Pointer Dereference (CVE-2026-34765, CVE-2026-34781)

Summary There are vulnerabilities in electron-37.8.0.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-34765, CVE-2026-34781. The vulnerability has/vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-34765 DESCRIPTION: Electron is a framework for writing...

@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-34765 via electron (>=39.0.0, <=39.2.7)

electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....

@ascua/electron (0.7.0), @lvce-editor/main-process (>=2.23.0, <=3.1.0) +27 more potentially affected by CVE-2026-34765 via electron (>=39.0.0, <=39.2.7)

electron NPM version =39.0.0, =2.23.0, =3.1.0 - @obsidian-typings/obsidian-catalyst-1.11.0 4.73.0 - @obsidian-typings/obsidian-catalyst-1.11.1 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.2 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11.3 4.88.0 - @obsidian-typings/obsidian-catalyst-1.11....

cicy-desktop (>=2.1.30, <=2.1.342), snapview (>=1.0.5, <=1.3.0) potentially affected by CVE-2026-34765 via electron (41.0.3)

electron NPM version 41.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - cicy-desktop =2.1.30, =1.0.5, =1.3.0 Source cves: CVE-2026-34765 Source advisory: SNYK:JS-ELECTRON-15923931...

@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +10 more potentially affected by CVE-2026-34765 via electron (>=40.0.0, <=40.7.0)

electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-34765 Source advisory: SNYK:JS-ELECTRON-15923931...

cicy-desktop (>=2.1.30, <=2.1.342), snapview (>=1.0.5, <=1.3.0) potentially affected by CVE-2026-34765 via electron (41.0.3)

electron NPM version 41.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - cicy-desktop =2.1.30, =1.0.5, =1.3.0 Source cves: CVE-2026-34765 Source advisory: OSV:GHSA-F3PV-WV63-48X8...

@ascua/electron (>=0.8.0, <=0.18.0), @eltmon/panctl (0.7.2-canary.3) +10 more potentially affected by CVE-2026-34765 via electron (>=40.0.0, <=40.7.0)

electron NPM version =40.0.0, =0.8.0, =4.0.0, =0.30.0, =0.8.0, =1.1.0-rc-1, =1.0.0, =1.142.0, =0.1.5, =1.2.1, =2.0.4, =3.24.1 Source cves: CVE-2026-34765 Source advisory: OSV:GHSA-F3PV-WV63-48X8...

cicy-desktop (>=2.1.30, <=2.1.342), snapview (>=1.0.5, <=1.3.0) potentially affected by CVE-2026-34764 via electron (41.0.3)

electron NPM version 41.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - cicy-desktop =2.1.30, =1.0.5, =1.3.0 Source cves: CVE-2026-34764 Source advisory: SNYK:JS-ELECTRON-15907847...