106 matches found
EUVD-2021-0507
Malware in sbrugna...
EUVD-2019-10926
Malware in sbrugna...
EUVD-2021-19536
Malware in sbrugna...
EUVD-2022-6098
Malicious code in bioql PyPI...
EUVD-2022-7391
Malicious code in bioql PyPI...
EUVD-2025-9623
Malicious code in bioql PyPI...
EUVD-2023-2557
Malicious code in bioql PyPI...
EUVD-2022-1290
Malicious code in bioql PyPI...
EUVD-2023-2513
Malicious code in bioql PyPI...
EUVD-2024-54718
Malicious code in bioql PyPI...
EUVD-2024-54987
Malicious code in bioql PyPI...
EUVD-2023-2462
Malicious code in bioql PyPI...
EUVD-2022-5978
Malicious code in bioql PyPI...
EUVD-2023-3149
Malicious code in bioql PyPI...
CVE-2025-55305 Electron is vulnerable to Code Injection via resource modification
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions below 35.7.5, 36.0.0-alpha.1 through 36.8.0, 37.0.0-alpha.1 through 37.3.1 and 38.0.0-alpha.1 through 38.0.0-beta.6, ASAR Integrity Bypass via resource modification. This only impac...
Arbitrary Code Injection
Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Arbitrary Code Injection via modification of the resources folder when the embeddedAsarIntegrityValidation...
Access of Resource Using Incompatible Type ('Type Confusion')
Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type 'Type Confusion' via the lack of limitation on max inlining ids ...
Use After Free
Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via improper handling of possible socket destruction in P2PSocketTcpBase. An attacker can...
CVE-2024-46993
Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions prior to 28.3.2, 29.3.3, and 30.0.3, the nativeImage.createFromPath and nativeImage.createFromBuffer functions call a function downstream that is vulnerable to a heap...
CVE-2024-46993 Electron Vulnerable to Heap Buffer Overflow in NativeImage::CreateFromPath
Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions prior to 28.3.2, 29.3.3, and 30.0.3, the nativeImage.createFromPath and nativeImage.createFromBuffer functions call a function downstream that is vulnerable to a heap...