13336 matches found
ROOT-APP-PYPI-CVE-2024-22195 CVE-2024-22195 in Jinja2 - Patched by Root
Root has patched CVE-2024-22195 in the Jinja2 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-30861 CVE-2023-30861 in Flask - Patched by Root
Root has patched CVE-2023-30861 in the Flask package for Root:PyPI. Multiple fixed versions available...
CVE-2026-70600
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the native autofill popup could be positioned by a cross-origin iframe outside that iframe's bounds, over the embedding page's UI, enabling...
CVE-2026-70599 Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1, serial-port and media permission checks made from an iframe passed the top-level frame origin to session.setPermissionCheckHandler instead of...
CVE-2026-70598
CVE-2026-70598 affects Electron: prior to 39.8.10, 40.9.0, 41.2.1, and 42.0.0-beta.3, offscreen rendering frame data from the GPU process was not fully validated by the main process. A compromised GPU process could cause the main process to read out‑of‑bounds memory while producing paint images, ...
CVE-2026-70598 Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 40.9.0, 41.2.1, and 42.0.0-beta.3, offscreen rendering frame data received from the GPU process was not fully validated by the main process. A compromised GPU process could...
CVE-2026-70598
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 40.9.0, 41.2.1, and 42.0.0-beta.3, offscreen rendering frame data received from the GPU process was not fully validated by the main process. A compromised GPU process could...
EUVD-2026-53403
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the check Electron uses on macOS to confirm it was launched by a same-signed parent process could be bypassed by a local process. Apps that...
ROOT-APP-NPM-NSWG-ECO-434 NSWG-ECO-434 in base64-url - Patched by Root
Root has patched NSWG-ECO-434 in the base64-url package for Root:npm. Multiple fixed versions available...
ROOT-APP-RUBY-CVE-2026-54902 CVE-2026-54902 in oj - Patched by Root
Root has patched CVE-2026-54902 in the oj package for Root:Ruby. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-MH5C-679W-HH4R GHSA-mh5c-679w-hh4r in mongodb - Patched by Root
Root has patched GHSA-mh5c-679w-hh4r in the mongodb package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-25940 CVE-2026-25940 in jspdf - Patched by Root
Root has patched CVE-2026-25940 in the jspdf package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-25535 CVE-2026-25535 in jspdf - Patched by Root
Root has patched CVE-2026-25535 in the jspdf package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-24737 CVE-2026-24737 in jspdf - Patched by Root
Root has patched CVE-2026-24737 in the jspdf package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-24133 CVE-2026-24133 in jspdf - Patched by Root
Root has patched CVE-2026-24133 in the jspdf package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-25755 CVE-2026-25755 in jspdf - Patched by Root
Root has patched CVE-2026-25755 in the jspdf package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-31938 CVE-2026-31938 in jspdf - Patched by Root
Root has patched CVE-2026-31938 in the jspdf package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-31898 CVE-2026-31898 in jspdf - Patched by Root
Root has patched CVE-2026-31898 in the jspdf package for Root:npm. Multiple fixed versions available...