CVE-2023-29198

CVE-2023-29198 affects Electron apps that use contextIsolation with contextBridge. The vulnerability is a context isolation bypass that occurs when a main-world exposed API returns an unserializable object (e.g., a canvas rendering context), allowing access from the renderer to the isolated Elect...

futamata (0.0.36), hey-you (>=4.1.5, <=4.1.7) +1 more potentially affected by CVE-2023-29198 via electron (24.0.0)

electron NPM version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - futamata 0.0.36 - hey-you =4.1.5, =0.0.31, =0.0.33 Source cves: CVE-2023-29198 Source advisory: OSV:GHSA-P7V2-P9M8-QQG7...

@cubesoft/nx-electron (>=0.49.0, <=0.65.0), @grandlinex/e-kernel (>=0.30.0, <=0.32.0) +4 more potentially affected by CVE-2023-29198 via electron (>=23.0.0, <=23.2.1)

electron NPM version =23.0.0, =0.49.0, =0.30.0, =1.0.0, =0.0.90, =0.0.1, =0.0.15 Source cves: CVE-2023-29198 Source advisory: OSV:GHSA-P7V2-P9M8-QQG7...

@deploysentinel/playwright-watch (>=0.1.0, <=0.2.2), @finsemble/finsemble-core (>=1.0.0-beta-9, <=8.7.0) +8 more potentially affected by CVE-2023-29198 via electron (>=22.0.0, <=22.3.5)

electron NPM version =22.0.0, =0.1.0, =1.0.0-beta-9, =1.0.0-beta-9, =60.0.0-pre1, =0.0.1-alpha.2022-12-11.1670718306317, =1.3.0, =0.0.87, =2.0.92, =2.0.98 Source cves: CVE-2023-29198 Source advisory: OSV:GHSA-P7V2-P9M8-QQG7...