Electron-Builder
Electron · 4 CVEs
CVE-2026-54672
HIGH
electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`
Jun 30, 2026
CVE-2026-54673
HIGH
electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-ut…
Jun 30, 2026
CVE-2024-39698
HIGH
Code Signing Bypass on Windows in electron-updater < 6.3.0-alpha.6
Jul 9, 2024
CVE-2024-27303
HIGH
electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)
Mar 6, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-54672 | electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib` | HIGH | 0.19% | Jun 30, 2026 |
| CVE-2026-54673 | electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime` | HIGH | 0.41% | Jun 30, 2026 |
| CVE-2024-39698 | Code Signing Bypass on Windows in electron-updater < 6.3.0-alpha.6 | HIGH | 0.43% | Jul 9, 2024 |
| CVE-2024-27303 | electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only) | HIGH | 0.28% | Mar 6, 2024 |
Showing 1 to 4 of 4 CVEs