OPENSUSE-SU-2025:14917-1 nodejs-electron-33.4.6-1.1 on GA media

These are all security issues fixed in the nodejs-electron-33.4.6-1.1 package on the GA media of openSUSE Tumbleweed...

electron{33,34} -- Type Confusion in V8

Electron developers report: This update fixes the following vulnerability: Security: backported fix for CVE-2025-1920...

CVE-2024-57061

An issue in Termius Version 9.9.0 through v.9.16.0 allows a physically proximate attacker to execute arbitrary code via the insecure Electron Fuses configuration...

CVE-2024-57061

Termius desktop client (versions 9.9.0–9.16.0) is affected by an issue where an insecure Electron Fuses configuration enables a physically proximate attacker to execute arbitrary code. Root cause: misconfigured Electron Fuses in the app, allowing code execution. Impact: high, with potential compr...

Termius 安全漏洞

Termius is an SSH client from Termius, Inc. A security vulnerability exists in Termius versions 9.9.0 through 9.16.0, which stems from an insecure Electron Fuses configuration that could allow a physically proximate attacker to execute arbitrary code...

CVE-2024-57061

An issue in Termius Version 9.9.0 through v.9.16.0 allows a physically proximate attacker to execute arbitrary code via the insecure Electron Fuses configuration...

CVE-2024-57061

An issue in Termius Version 9.9.0 through v.9.16.0 allows a physically proximate attacker to execute arbitrary code via the insecure Electron Fuses configuration...

Malicious code in digits-electron-src (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cbfd2aa51f6d4ff7a9bc75c482e5fde9d3f100b1f911d8f55dbc642696897aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OPENSUSE-SU-2025:14884-1 nodejs-electron-33.4.4-1.1 on GA media

These are all security issues fixed in the nodejs-electron-33.4.4-1.1 package on the GA media of openSUSE Tumbleweed...

Access of Resource Using Incompatible Type ('Type Confusion')

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type 'Type Confusion' in v8. Remediation A fix was pushed into the...

FreeBSD : electron33 -- multiple vulnerabilities (6ba9e26e-c9c6-49f7-ae43-47e5864f0b66)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6ba9e26e-c9c6-49f7-ae43-47e5864f0b66 advisory. Electron develpers report: This update fixes the following vulnerabilities: Tenable has...

FreeBSD : electron32 -- multiple vulnerabilities (6e27040b-61b7-4989-9471-dfb10c3cd76e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6e27040b-61b7-4989-9471-dfb10c3cd76e advisory. Electron developers report: This update fixes the following vulnerabilities: Tenable has extracted the...

electron33 -- multiple vulnerabilities

Electron develpers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2025-0445. Security: backported fix for CVE-2025-0995. Security: backported fix for CVE-2025-0998...

FreeBSD : electron{32,33} -- multiple vulnerabilities (f4f3e001-402b-4d6d-8efa-ab11fcf8de2b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f4f3e001-402b-4d6d-8efa-ab11fcf8de2b advisory. Electron developers report: This update fixes the following vulnerabilities: Tenable has...

Malicious code in epam-cdisc-electron (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1792 Malicious code in epam-cdisc-electron (npm)

--- -= Per source details. Do not edit below this line.=-...

electron32 -- multiple vulnerabilities

Electron developers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2025-0445. Security: backported fix for CVE-2025-0998...

nodejs-electron-33.4.2-1.1 on GA media (moderate)

nodejs-electron-33.4.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:14848-1 Rating: moderate Cross-References: CVE-2025-0611 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

Heap-based Buffer Overflow

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in v8, when processing a very large number of parameters. Remediation A fix was...

MAL-2025-1412 Malicious code in electron-dependency-confusion-window (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db478dbbcf0f5373a70e3193cc1c658b4438bdcd02a3f432b141e442e7bbbda7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...