OPENSUSE-SU-2024:13185-1 nodejs-electron-22.3.23-1.1 on GA media

These are all security issues fixed in the nodejs-electron-22.3.23-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13077-1 nodejs-electron-22.3.17-1.1 on GA media

These are all security issues fixed in the nodejs-electron-22.3.17-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12554-1 nodejs-electron-21.3.2-2.1 on GA media

These are all security issues fixed in the nodejs-electron-21.3.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13738-1 nodejs-electron-28.2.5-1.1 on GA media

These are all security issues fixed in the nodejs-electron-28.2.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12334-1 nodejs-electron-19.0.17-1.1 on GA media

These are all security issues fixed in the nodejs-electron-19.0.17-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13600-1 nodejs-electron-27.2.3-1.1 on GA media

These are all security issues fixed in the nodejs-electron-27.2.3-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-XGQM-WP7W-MGG2 Mattermost Desktop App allows for bypassing TCC restrictions on macOS

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

Mattermost Desktop App allows for bypassing TCC restrictions on macOS

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

UBUNTU-CVE-2024-36287

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

CVE-2024-36287 Bypass of TCC restrictions on macOS

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

CVE-2024-36287 Bypass of TCC restrictions on macOS

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

CVE-2024-36287 Bypass of TCC restrictions on macOS

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

CVE-2024-36287

Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS...

Mattermost Desktop App Security Vulnerability

Mattermost Desktop App is a messaging desktop application from Mattermost USA. A security vulnerability exists in Mattermost Desktop App version 5.7.0 and earlier, which stems from an inability to disable certain Electron debugging flags, which allows bypassing TCC restrictions...

PT-2024-26951 · Mattermost · Mattermost Desktop App

Name of the Vulnerable Software and Affected Versions: Mattermost Desktop App versions =5.7.0 Description: The issue allows for bypassing TCC restrictions on macOS due to the failure to disable certain Electron debug flags. Recommendations: For Mattermost Desktop App versions =5.7.0, update to a...

CVE-2024-3166 Cross-Site Scripting (XSS) Vulnerability in mintplex-labs/anything-llm

A Cross-Site Scripting XSS vulnerability exists in mintplex-labs/anything-llm, affecting both the desktop application version 1.2.0 and the latest version of the web application. The vulnerability arises from the application's feature to fetch and embed content from websites into workspaces, whic...

CVE-2024-3166

Summary: CVE-2024-3166 affects mintplex-labs/anything-llm, including desktop v1.2.0 to v1.4.1 and the web app. The vulnerability is an XSS in the feature that fetches and embeds external website content into workspaces, with a route to Remote Code Execution in the desktop app due to Electron sett...

PT-2024-24179 · Mintplex · Mintplex-Labs/Anything-Llm

Name of the Vulnerable Software and Affected Versions: mintplex-labs/anything-llm versions 1.2.0 through 1.4.1 mintplex-labs/anything-llm web application affected versions not specified Description: A Cross-Site Scripting XSS vulnerability exists in the application, affecting both the desktop and...

electron29 -- use after free in Dawn

Electron developers report: This update fixes the following vulnerability: Security: backported fix for CVE-2024-4948...

electron28 -- multiple vulnerabilities

Electron developers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2024-4948. Security: backported fix for CVE-2024-3914. Security: backported fix for CVE-2024-4060. Security: backported fix for CVE-2024-4058. Security: backported fix for CVE-2024-4558...