electron vulnerabilities (npm)
80 vulnerabilities.
electronnpmElectron Vulnerable to Heap Buffer Overflow in NativeImage::CreateFromPath4.4 MediumelectronnpmElectron ASAR Integrity bypass by just modifying the content7.8 HighelectronnpmASAR Integrity bypass via filetype confusion in electron6.1 MediumelectronnpmElectron affected by libvpx's heap buffer overflow in vp8 encoding8.8 HighelectronnpmWith a specially crafted WebP lossless file, libwebp may write data out of bounds to the heap. ...10.0 CriticalelectronnpmDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 HighelectronnpmElectron: Out-of-package code execution when launched with arbitrary cwd6.1 MediumelectronnpmContext isolation bypass via nested unserializable return value in Electron6.0 MediumelectronnpmContent-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled in Electron7.5 HighelectronnpmHeap buffer overflow in GPU9.6 CriticalelectronnpmElectron subject to Exfiltration of hashed SMB credentials on Windows via file:// redirect7.2 HighelectronnpmElectron's AutoUpdater module fails to validate certain nested components of the bundle6.6 MediumelectronnpmExposure of Resource to Wrong Sphere in Electron2.2 LowelectronnpmRenderers can obtain access to random bluetooth device without permission in Electron3.4 LowelectronnpmSandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API6.8 MediumelectronnpmElectron vulnerable to ID collision when routing IPC messages to renderers containing OOPIFs5.4 MediumelectronnpmContext isolation bypass in Electron5.6 MediumelectronnpmUnpreventable top-level navigation in Electron7.5 HighelectronnpmArbitrary file read via window-open IPC in Electron6.8 MediumelectronnpmContext isolation bypass via contextBridge in Electron7.7 HighelectronnpmContext isolation bypass via leaked cross-context objects in Electron7.8 HighelectronnpmContext isolation bypass via Promise in Electron6.8 MediumelectronnpmElectron webPreferences vulnerability can be used to perform remote code execution8.1 HighelectronnpmChromium Remote Code Execution in electron9.8 CriticalelectronnpmElectron Vulnerable to Code Execution by Re-Enabling Node.js Integration8.1 HighelectronnpmElectron protocol handler browser vulnerable to Command Injection8.8 HighelectronnpmRemote Code Execution in electron8.8 HighelectronnpmElectron vulnerable to URL spoofing via PDFium4.3 MediumelectronnpmElectron vulnerable to remote command execution8.1 HighelectronnpmHigh severity vulnerability that affects electron7.8 High