ElectronVulnerableVersion

Find Electron Apps Vulnerable to CVE-2023-4863 / CVE-2023-5129 This PowerShell script downloads Sysinternals Strings, recursively searches for strings within all .exe files across all drives, and compares the Electron version found with known patched versions below to determine vulnerability to...

django-badgify-lab (0.1.5), django-oscar (>=1.0.0, <=1.0.2) potentially affected by CVE-2023-4863 +1 more via pillow (2.4.0)

pillow PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-badgify-lab 0.1.5 - django-oscar =1.0.0, =1.0.2 Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory: OSV:PYSEC-2026-1794...

memegen-desktop (>=0.0.1, <=0.1.1), moca (0.3.3) +1 more potentially affected by CVE-2023-4863 +1 more via pillow (3.3.1)

pillow PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - memegen-desktop =0.0.1, =0.0.4.dev68, =0.0.5.dev3 Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory: OSV:PYSEC-2026-1794...

al-for-design (0.0.1), autogluon (>=0.0.5, <=0.1.0b20210209) +48 more potentially affected by CVE-2023-4863 +1 more via pillow (6.2.1)

pillow PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - al-for-design 0.0.1 - autogluon =0.0.5, =0.0.15b20201014, =0.0.15b20201024, =0.0.16b20210114, =0.0.15b20201024, =0.0.121, =0.0.1, =0.0.1, =0.0.1,...

dcicsnovault (>=3.1.6, <=4.2.0.0b0) potentially affected by CVE-2023-4863 +1 more via pillow (3.1.1)

pillow PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - dcicsnovault =3.1.6, =4.2.0.0b0 Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory: OSV:PYSEC-2026-1794...

ayab (0.9.0), distribusi (>=0.0.2, <=0.0.4) potentially affected by CVE-2023-4863 +1 more via pillow (4.1.0)

pillow PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - ayab 0.9.0 - distribusi =0.0.2, =0.0.4 Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory: OSV:PYSEC-2026-1794...

dcicsnovault (>=2.0.0b4, <=4.0.0b2), django-dynamic-scraper (>=0.11.4, <=0.13.1) +12 more potentially affected by CVE-2023-4863 +1 more via pillow (3.4.2)

pillow PYPI version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - dcicsnovault =2.0.0b4, =0.11.4, =0.18.1, =0.6.12a2, =0.9.0, =0.2.1, =0.0.3, =1.6.0, =1.4.0, =1.12.0 - yulelog 0.0.3 Source cves: CVE-2023-4863,...

2xh-leet (0.1.2), actfw-core (>=2.0.0a0, <=2.1.1) +92 more potentially affected by CVE-2023-4863 +1 more via pillow (5.4.1)

pillow PYPI version 5.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 2xh-leet 0.1.2 - actfw-core =2.0.0a0, =0.1.0a7, =0.1.1, =2.0.0a0, =0.57.1b6141, =2.0.1, =0.4.0, =0.4.0, =0.0.2, =4.3.0, =2.17.0, =0.5.0, =2.0.0,...

groupyapi (0.7.1) potentially affected by CVE-2023-4863 +1 more via pillow (2.5.3)

pillow PYPI version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - groupyapi 0.7.1 Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory: OSV:PYSEC-2026-1794...

planadversity (1.0.2) potentially affected by CVE-2023-4863 +1 more via pillow (2.0.0)

pillow PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - planadversity 1.0.2 Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory: OSV:PYSEC-2026-1794...

blockies (0.0.1), demosys-py (>=0.1.2, <=0.3.12) +17 more potentially affected by CVE-2023-4863 +1 more via pillow (4.0.0)

pillow PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - blockies 0.0.1 - demosys-py =0.1.2, =0.0.2, =1.6.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.0.0, =0.1.0, =3.0.0 and more Source cves:...

adaptgym (>=0.1.0, <=0.1.2), agave-pyclient (>=1.0.0, <=1.1.2) +138 more potentially affected by CVE-2023-4863 +1 more via pillow (8.2.0)

pillow PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adaptgym =0.1.0, =1.0.0, =1.1.5, =1.2.3, =0.0.21, =1.0.1, =0.0.7, =0.15.0, =0.14.0, =0.3.0, =0.4.0 - arcor2-dobot 0.2.3 - arcor2-execution 0.16.0 -...

stoqdrivers (2.0.1) potentially affected by CVE-2023-4863 +1 more via pillow (3.1.2)

pillow PYPI version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - stoqdrivers 2.0.1 Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory: OSV:PYSEC-2026-1794...

acapy-patched-old (0.5.6), agl-predict-endo-frame (0.1.1) +271 more potentially affected by CVE-2023-4863 +1 more via pillow (7.2.0)

pillow PYPI version 7.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - acapy-patched-old 0.5.6 - agl-predict-endo-frame 0.1.1 - ailab-lite =0.1.1, =0.0.2, =0.3.10, =0.1.0, =2020.1.0, =0.9.0, =0.9.0, =0.8.1, =0.8.1,...

balebot (>=1.2.8, <=1.8.15), demosys-py (>=1.0.6, <=2.0.3) +19 more potentially affected by CVE-2023-4863 +1 more via pillow (5.2.0)

pillow PYPI version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - balebot =1.2.8, =1.0.6, =0.3.0, =1.0.7, =1.2.1, =1.8.3, =2.1.0, =2.0.3, =2.1.0 - poltools 1.0.0 and more Source cves: CVE-2023-4863, CVE-2023-5129...

dcicsnovault (>=2.0.0b0, <=2.0.0b11), shot-detector (0.0.4.dev41) +2 more potentially affected by CVE-2023-4863 +1 more via pillow (3.3.0)

pillow PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - dcicsnovault =2.0.0b0, =0.2.3, =0.0.1, =0.1.0 Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory: OSV:PYSEC-2026-1794...

admindjango-ckeditor-blog (0.1.0), demosys-py (>=0.3.13, <=0.4.0) +3 more potentially affected by CVE-2023-4863 +1 more via pillow (4.1.1)

pillow PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - admindjango-ckeditor-blog 0.1.0 - demosys-py =0.3.13, =0.9.0, =1.1.0, =1.3.1 Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory:...

170051277-trab-final-gces (>=0.3.0, <=0.5.0), 2022-2-gces-ifpf (0.3.0) +1331 more potentially affected by CVE-2023-4863 +1 more via pillow (9.5.0)

pillow PYPI version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 170051277-trab-final-gces =0.3.0, =0.1.0, =0.1.0, =2.0.1, =0.1.4, =1.2.5, =0.1.0, =1.2.0, =1.10.3, =0.61.9b59, =1.3.1 and more Source cves:...

3deecelltracker (0.5.0a0), aima (2023.2.4) +60 more potentially affected by CVE-2023-4863 +1 more via pillow (9.1.0)

pillow PYPI version 9.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 3deecelltracker 0.5.0a0 - aima 2023.2.4 - an-website =22.5.13, =2.4.5, =0.2.4rc1, =22.14.1, =0.0.3, =1.0.1, =0.1.0, =0.0.36, =0.0.39 and more Source...

abayestest (>=0.0.2, <=0.0.4), adeso (>=0.0.1, <=0.0.4) +119 more potentially affected by CVE-2023-4863 +1 more via pillow (10.0.0)

pillow PYPI version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abayestest =0.0.2, =0.0.1, =0.7.1, =0.3.4rc1, =0.0.0, =4.4.0.46, =0.0.17, =23.28.1, =0.1.18, =1.0.0b0, =1.0.2, =0.6.15, =1.0.0, =0.0.1, =0.0.12 and...