2344 matches found
CVE-2025-55305 Electron is vulnerable to Code Injection via resource modification
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions below 35.7.5, 36.0.0-alpha.1 through 36.8.0, 37.0.0-alpha.1 through 37.3.1 and 38.0.0-alpha.1 through 38.0.0-beta.6, ASAR Integrity Bypass via resource modification. This only impac...
Electron 安全漏洞
Electron is Electron open source a user to write cross-platform desktop application JavaScript framework. The framework is based on nodejs and Chromium and can be used to write cross-platform desktop applications using HTML, CSS. Electron has a security vulnerability that stems from a resource...
Markdownify 命令注入漏洞
Markdownify is a minimal Markdown Editor desktop application built on Electron by the individual developer Amit Merchant. A command injection vulnerability exists in Markdownify versions prior to 0.0.2, which stems from a failure to clean up input parameters resulting in command injection that...
Arbitrary Code Injection
Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Arbitrary Code Injection via modification of the resources folder when the embeddedAsarIntegrityValidation...
Arbitrary Code Injection
Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Arbitrary Code Injection via modification of the resources folder when the embeddedAsarIntegrityValidation and...
GHSA-VMQV-HX8Q-J7MG Electron has ASAR Integrity Bypass via resource modification
Impact This only impacts apps that have the embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses enabled. Apps without these fuses enabled are not impacted. Specifically this issue can only be exploited if your app is launched from a filesystem the attacker has write access too. i.e. the...
Electron has ASAR Integrity Bypass via resource modification
Impact This only impacts apps that have the embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses enabled. Apps without these fuses enabled are not impacted. Specifically this issue can only be exploited if your app is launched from a filesystem the attacker has write access too. i.e. the...
Linux Distros Unpatched Vulnerability : CVE-2024-36287
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS. CVE-2024-36287 Note th...
PT-2025-35936
Name of the Vulnerable Software and Affected Versions Electron versions prior to 35.7.5 Electron versions 36.0.0-alpha.1 through 36.8.0 Electron versions 37.0.0-alpha.1 through 37.3.1 Electron versions 38.0.0-alpha.1 through 38.0.0-beta.6 Description Electron is a framework used for building...
Malicious code in electron-grunt-sadr-paleomagnetism (npm)
The package electron-grunt-sadr-paleomagnetism was found to contain malicious code...
Malicious code in nodemon-electron-builder-babel-vega (npm)
The package nodemon-electron-builder-babel-vega was found to contain malicious code...
Malicious code in electron-charon-convict-meissa (npm)
The package electron-charon-convict-meissa was found to contain malicious code...
Malicious code in run-script-bootes-lithosphere-electron-builder (npm)
The package run-script-bootes-lithosphere-electron-builder was found to contain malicious code...
Malicious code in procyon-bellatrix-electron-builder-phoebe (npm)
The package procyon-bellatrix-electron-builder-phoebe was found to contain malicious code...
Malicious code in electron-osx-appearance-settings (npm)
The package electron-osx-appearance-settings was found to contain malicious code...
Malicious code in upgrade-inflation-electron-builder-outercore (npm)
The package upgrade-inflation-electron-builder-outercore was found to contain malicious code...
Malicious code in cosmicsilence-changelog-electron-builder-auth0 (npm)
The package cosmicsilence-changelog-electron-builder-auth0 was found to contain malicious code...
Malicious code in webpack-karma-electron-builder-neuromorphic (npm)
The package webpack-karma-electron-builder-neuromorphic was found to contain malicious code...