@abetomo/csv-select (>=1.0.0 <=1.0.1), @ascua/electron (>=0.0.73 <=0.0.131) +114 more potentially affected by CVE-2021-39184 via electron (>=0.1.2 <=11.4.9)

electron NPM version =0.1.2, =1.0.0, =0.0.73, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =0.1.0, =8.0.0, =5.1.1, =2.5.16, =1.1.1, =3.0.9 and more Source cves: CVE-2021-39184 Source advisory: OSV:GHSA-MPJM-V997-C4H4...

CVE-2021-39184

Electron vulnerability CVE-2021-39184 affects sandboxed renderers extracting thumbnails of arbitrary files via the createThumbnailFromPath API. Older Electron versions (before 11.5.0, 12.1.0, and 13.3.0) are impacted; fixes are provided in 11.5.0+, 12.1.0+, and 13.3.0+. All documented workarounds...