Malicious code in loom-plugin-eslint (npm)

The package loom-plugin-eslint was found to contain malicious code...

MAL-2025-25579 Malicious code in loom-plugin-postcss (npm)

The package loom-plugin-postcss was found to contain malicious code...

MAL-2025-25580 Malicious code in loom-plugin-prettier (npm)

The package loom-plugin-prettier was found to contain malicious code...

Malicious code in loom-plugin-typescript (npm)

The package loom-plugin-typescript was found to contain malicious code...

Malicious code in loom-plugin-build-library-extended (npm)

The package loom-plugin-build-library-extended was found to contain malicious code...

MAL-2025-25575 Malicious code in loom-plugin-build-library-extended (npm)

The package loom-plugin-build-library-extended was found to contain malicious code...

MAL-2025-25577 Malicious code in loom-plugin-jest (npm)

The package loom-plugin-jest was found to contain malicious code...

MAL-2025-25578 Malicious code in loom-plugin-package-build (npm)

The package loom-plugin-package-build was found to contain malicious code...

MAL-2025-25576 Malicious code in loom-plugin-eslint (npm)

The package loom-plugin-eslint was found to contain malicious code...

MAL-2025-25583 Malicious code in loom-plugin-typescript (npm)

The package loom-plugin-typescript was found to contain malicious code...

CVE-2024-23742

An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. NOTE: the vendor disputes this because it requires local access to a victim's machine...

CVE-2019-14432

Incorrect authentication of application WebSocket connections in Loom Desktop for Mac up to 0.16.0 allows remote code execution from either malicious JavaScript in a browser or hosts on the same network, during periods in which a user is recording a video with the application. The same attack...

CVE-2024-23742

An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. NOTE: the vendor disputes this because it requires local access to a victim's machine...

CVE-2024-23742

An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. NOTE: the vendor disputes this because it requires local access to a victim's machine...

Code injection

An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. NOTE: the vendor disputes this because it requires local access to a victim's machine...

CVE-2024-23742

CVE-2024-23742 affects Loom on macOS 0.196.1 and earlier. The issue enables arbitrary code execution via the RunAsNode and enableNodeClilnspectArguments settings; the vendor contends exploitation requires local access. Connected sources (Red Hat, NVD, CNNVD, CVE listings, PT Security) corroborate...

Loom Security Vulnerabilities

Loom is a free screen recorder for Mac from Loom. A security vulnerability previously existed in Loom version 0.196.1, which stemmed from arbitrary code execution via the RunAsNode and enableNodeClilnspectArguments settings...

CVE-2024-23742

An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. NOTE: the vendor disputes this because it requires local access to a victim's machine...

CVE-2024-23742

An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. NOTE: the vendor disputes this because it requires local access to a victim's machine...

PT-2024-20050 · Loom · Loom

Name of the Vulnerable Software and Affected Versions: Loom on macOS version 0.196.1 and before Description: An issue in Loom allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. The vendor disputes this issue because it requires local...